CVE-2017-15079: Path Traversal
Published Oct 6, 2017
·Updated
The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal.
Affected Software
1 affected component
wpmudev Smush Image Compression And Optimization Wordpress<=2.7.5
Event History
Oct 6, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15079?
CVE-2017-15079 is classified as a medium severity vulnerability.
2
How do I fix CVE-2017-15079?
To fix CVE-2017-15079, you should update the Smush Image Compression and Optimization plugin to version 2.7.6 or later.
3
What type of vulnerability is CVE-2017-15079?
CVE-2017-15079 is a directory traversal vulnerability affecting the Smush Image Compression and Optimization plugin.
4
Who is affected by CVE-2017-15079?
Users of the Smush Image Compression and Optimization plugin version 2.7.5 or earlier are affected by CVE-2017-15079.
5
Can CVE-2017-15079 lead to unauthorized access?
Yes, CVE-2017-15079 can potentially lead to unauthorized access to sensitive files on the server.