CISA-2022-31474 — Vulnetix

CISA-2022-31474 PUBLISHED CVSS 7.5 HIGH

Reported by Patchstack · Published March 13, 2023

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from 8.5.8.0 through 8.7.4.1.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
iThemes	BackupBuddy	8.5.8.0
iThemes	BackupBuddy	8.5.8.0, 8.5.8.0

Timeline

Mar 13, 2023 CVE Published
Jan 8, 2025 CVE Updated

References

vdb-entry
vendor-advisory

Open in Interactive Console →