Approved changes feed: RSS · Atom

cpe:2.3:a:bludit:backup_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBludit (67bdaa9c-b7c5-5830-82a9-c3e7bf8573ca)
ProductBackup Plugin (aa0c5b3c-0467-56b6-93f2-26c981f93bee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-53907 vulnerable 2026-06-08 06:19:39.987824 Bludit 3.13.1 Authenticated Arbitrary File Download via Backup Plugin
MEDIUM (6.5)
Bludit versions before 3.13.1 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system files through directory traversal.
Published: 2025-12-17T22:44:45.886Z
Updated: 2026-04-07T14:07:29.146Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.