2 lines
2.4 KiB
JSON
2 lines
2.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"the-wound","vendor":"Unknown","versions":[{"lessThanOrEqual":"0.0.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:the_wound_project:the_wound:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"1B939288-6C53-42EE-B321-4981EC090C42","versionEndIncluding":"0.0.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary file from the server"},{"lang":"es","value":"El tema The-wound de WordPress hasta la versión 0.0.1 no valida algunos parámetros antes de usarlos para generar rutas pasadas para incluir funciones, lo que permite que usuarios no autenticados realicen ataques LFI y descarguen archivos arbitrarios del servidor."}],"id":"CVE-2025-2558","lastModified":"2026-06-17T09:07:10.610","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-2558","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-04-24T14:38:12.728498Z","version":"2.0.3"}}]},"published":"2025-04-24T06:15:45.800","references":[{"source":"contact@wpscan.com","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/6a8e1c89-a01d-4347-91fc-ba454784b153/"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/6a8e1c89-a01d-4347-91fc-ba454784b153/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|