CVE-2022-2544: Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing
The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2544?
CVE-2022-2544 is classified as a moderate severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2022-2544?
To fix CVE-2022-2544, upgrade the Ninja Job Board plugin to version 1.3.3 or later.
What type of vulnerability is CVE-2022-2544?
CVE-2022-2544 is an information disclosure vulnerability caused by unauthenticated access to uploaded resumes.
Who is affected by CVE-2022-2544?
Users of the Ninja Job Board WordPress plugin prior to version 1.3.3 are affected by CVE-2022-2544.
What can attackers do with CVE-2022-2544?
Attackers can exploit CVE-2022-2544 to access and download resumes uploaded by job applicants due to directory listing vulnerabilities.