Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-53907. PoCs published by Antonio Cuomo.
AI-analyzed exploit summary This exploit targets Bludit versions below 3.13.1, leveraging an authenticated arbitrary file download vulnerability in the Backup Plugin. It authenticates using provided credentials, retrieves a CSRF token, and then downloads arbitrary files via path traversal.
Description
Bludit versions before 3.13.1 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system files through directory traversal.
Exploits (1)
This exploit targets Bludit versions below 3.13.1, leveraging an authenticated arbitrary file download vulnerability in the Backup Plugin. It authenticates using provided credentials, retrieves a CSRF token, and then downloads arbitrary files via path traversal.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N