CVE-2023-7236

{"id": "CVE-2023-7236", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2024-03-18T19:15:06.207", "references": [{"url": "https://wpscan.com/vulnerability/2a4557e2-b764-4678-a6d6-af39dd1ba76b/", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/2a4557e2-b764-4678-a6d6-af39dd1ba76b/", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information."}, {"lang": "es", "value": "El complemento Backup Bolt de WordPress hasta la versi\u00f3n 1.3.0 es vulnerable a la exposici\u00f3n de la informaci\u00f3n a trav\u00e9s del acceso desprotegido a los registros de depuraci\u00f3n. Esto hace posible que atacantes no autenticados recuperen el registro de depuraci\u00f3n que puede contener informaci\u00f3n como errores del sistema que podr\u00edan contener informaci\u00f3n confidencial."}], "lastModified": "2025-05-05T17:58:10.357", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:backupbolt:backup_bolt:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "63CEBFEA-008C-4024-9B1E-31DD546A1CAE", "versionEndIncluding": "1.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}