PT-2018-15398 · WordPress · Jsmol2Wp

Publicado 2018-12-25 · Atualizado 2019-01-09 · CVE-2018-20463

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions JSmol2WP plugin version 1.07

Description An issue in the JSmol2WP plugin allows for arbitrary file read via directory traversal. This is achieved by exploiting the query parameter in the jsmol.php query string with ../ directory traversal in php://filter/resource=. The issue can also be used for Server-Side Request Forgery (SSRF).

Recommendations For JSmol2WP plugin version 1.07, consider restricting access to the jsmol.php file until a patch is available. As a temporary workaround, avoid using the query parameter in the jsmol.php query string to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-20463

Produtos afetados

Jsmol2Wp

Referências · 4

• 🔥 https://wpvulndb.com/vulnerabilities/9197 · Exploit
• 🔥 https://cbiu.cc/2018/12/WordPress%E6%8F%92%E4%BB%B6jsmol2wp%E6%BC%8F%E6%B4%9E/#%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96-amp-SSRF · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-20463 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-20463 · Aviso do Fabricante