CVE-2022-3762
Published: 21 November 2022
Summary
CVE-2022-3762 is a medium-severity an unspecified weakness vulnerability in Booster Booster For Woocommerce. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 25.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-43116
Vulnerability details
The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not validate files to download in some of its modules, which could allow ShopManager and…
more
Admin to download arbitrary files from the server even when they are not supposed to be able to (for example in multisite)
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.