Download Monitor, a9d39906-1704-43c9-a503-759c72ab465e
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Download Monitor [download-monitor] < 1.9.7 Download Monitor < 1.9.7 - Unauthenticated Downloading of Logs An Unauthenticated attacker can export download logs from the Plugin. Which includes: Download ID, Version ID, Filename, User ID, User Login, User Email, User IP, User Agent, Date, Status. The information could potentially be used to mount further attacks or just collect contact information.
- Affected versions
-
max 1.9.7.
- Status
-
vulnerable