Vulnerability · Published Dec 18, 2023 · Assigned by WPScan
CVE-2023-6065Quttera Web Malware Scanner < 3.4.2.1 - Directory Listing to Sensitive Data Exposure
Medium 5.3
In plain English
A medium-severity security flaw in Quttera Web Malware Scanner from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 18.6% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)18.6%top 2.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Nuclei
Official description
The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn't restrict access to detailed scan logs, which allows a malicious actor to discover local paths and portions of the site's code
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Quttera Web Malware Scanner | 0 – before 3.4.2.1 |
References
- https://wpscan.com/vulnerability/64f2557f-c5e4-4779-9e28-911dfaf2dda5 exploit, vdb-entry, technical-description
- https://drive.google.com/file/d/1w83xWsVLS_gCpQy4LDwbjNK9JaB87EEf/view?usp=sharing