{"id":"CVE-2022-2544","state":"PUBLISHED","title":"Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing","description":"The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.","publishedAt":"2022-08-22T15:03:39.000Z","updatedAt":"2024-08-03T00:39:08.036Z","severity":null,"assigner":"WPScan","products":["Unknown Ninja Job Board – Ultimate WordPress Job Board Plugin"],"affected":[{"vendor":"Unknown","product":"Ninja Job Board – Ultimate WordPress Job Board Plugin","versions":[{"version":"1.3.3","status":"affected","lessThan":"1.3.3","versionType":"custom"}]}],"references":["https://wpscan.com/vulnerability/a9bcc68c-eeda-4647-8463-e7e136733053","https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php"],"weaknesses":["CWE-425"],"ingestedAt":"2026-10-29T19:50:01.354Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/2xxx/CVE-2022-2544.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-2544","state":"PUBLISHED","datePublished":"2022-08-22T15:03:39.000Z","dateUpdated":"2024-08-03T00:39:08.036Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2022-07-26T00:00:00.000Z"},"containers":{"cna":{"title":"Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing","descriptions":[{"lang":"en","value":"The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes."}],"affected":[{"vendor":"Unknown","product":"Ninja Job Board – Ultimate WordPress Job Board Plugin","versions":[{"version":"1.3.3","status":"affected","lessThan":"1.3.3","versionType":"custom"}]}],"references":[{"url":"https://wpscan.com/vulnerability/a9bcc68c-eeda-4647-8463-e7e136733053","tags":["x_refsource_MISC"]},{"url":"https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-425","description":"CWE-425 Direct Request ('Forced Browsing')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","dateUpdated":"2022-08-22T15:03:39.000Z","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81"},"credits":[{"lang":"en","value":"Daniel Ruf"}],"source":{"discovery":"EXTERNAL"},"x_generator":"WPScan CVE Generator","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"contact@wpscan.com","ID":"CVE-2022-2544","STATE":"PUBLIC","TITLE":"Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Ninja Job Board – Ultimate WordPress Job Board Plugin","version":{"version_data":[{"version_affected":"<","version_name":"1.3.3","version_value":"1.3.3"}]}}]},"vendor_name":"Unknown"}]}},"credit":[{"lang":"eng","value":"Daniel Ruf"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes."}]},"generator":"WPScan CVE Generator","problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-425 Direct Request ('Forced Browsing')"}]}]},"references":{"reference_data":[{"name":"https://wpscan.com/vulnerability/a9bcc68c-eeda-4647-8463-e7e136733053","refsource":"MISC","url":"https://wpscan.com/vulnerability/a9bcc68c-eeda-4647-8463-e7e136733053"},{"name":"https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php","refsource":"CONFIRM","url":"https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php"}]},"source":{"discovery":"EXTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://wpscan.com/vulnerability/a9bcc68c-eeda-4647-8463-e7e136733053","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T00:39:08.036Z"}}]}}}