Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-7165

JetBackup < 2.0.9.9 - Directory Listing Exposing Backups

Description

The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive directories in certain configurations, which allows malicious actors to leak backup files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown JetBackup

Default version status: unaffected

  • 0 to < 2.0.9.9affected

References