CVE-2023-6421: Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak
Published Jan 1, 2024
·Updated
The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one.
Affected Software
1 affected component
W3eden Download Manager Wordpress<3.2.83
Event History
Jan 1, 2024
CVE Published
via MITRE·02:18 PM
Data Sourced
via MITRE·02:18 PM
DescriptionWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-6421?
CVE-2023-6421 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2023-6421?
To fix CVE-2023-6421, update the Download Manager WordPress plugin to version 3.2.83 or later.
3
What version of the Download Manager plugin is affected by CVE-2023-6421?
CVE-2023-6421 affects versions of the Download Manager plugin prior to 3.2.83.
4
What issue does CVE-2023-6421 expose?
CVE-2023-6421 exposes file download passwords, leaking them when an invalid password is received.
5
Is there a workaround for CVE-2023-6421?
Currently, the best approach to mitigate CVE-2023-6421 is to update the plugin to the latest version.