What is CVE-2020-24312?

CVE-2020-24312 is a vulnerability in N/a. Published 2020-08-26.

Is CVE-2020-24312 known to be exploited?

13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2020-24312

mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htaccess file. This results in the ability for unauthenticated users to browse and download any site backups, which sometimes…

EPSS: 0.650 (98.5th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

20142995/nuclei-templates
ARPSyndicate/kenzer-templates
Elsfa7-110/kenzer-templates
StarCrossPortal/scalpel
anonymous364872/Rapier_
apif-review/APIF_
apit-review-account/apit-tool
d4n-sec/d4n-sec.github.io
merlinepedra/nuclei-templates
merlinepedra25/nuclei-templates

References

zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/ (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-24312?: CVE-2020-24312 is a vulnerability in N/a. Published 2020-08-26.
Is CVE-2020-24312 known to be exploited?: 13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.