Kraken
Monthly
Unauthenticated path traversal in Uber Kraken through 0.1.29 allows remote attackers to read files outside the configured storage root via the /tags/{tag} endpoint when the testfs backend and build-index tagserver are exposed. Percent-encoded parent-directory segments in the tag parameter bypass path validation and disclose files readable by the testfs process account, yielding high confidentiality impact with no integrity or availability effect. No public exploit identified at time of analysis.
The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.8. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthenticated path traversal in Uber Kraken through 0.1.29 allows remote attackers to read files outside the configured storage root via the /tags/{tag} endpoint when the testfs backend and build-index tagserver are exposed. Percent-encoded parent-directory segments in the tag parameter bypass path validation and disclose files readable by the testfs process account, yielding high confidentiality impact with no integrity or availability effect. No public exploit identified at time of analysis.
The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.8. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.