Description
Bludit versions before 3.13.0 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system files through directory traversal.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bludit | Backup Plugin | < 3.13.0 | 3.13.0 |
References
- ExploitDB-51541 exploit
- Official Product Webpage product
- VulnCheck Advisory: Bludit < 3.13.0 Authenticated Arbitrary File Download via Backup Plugin third-party-advisory