PT-2018-18591 · Woocommerce · Woocommerce Products Filter

Publicado 2018-03-14 · Atualizado 2018-04-12 · CVE-2018-8711

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WooCommerce Products Filter plugin versions prior to 2.2.0

Description A local file inclusion issue was discovered due to the lack of args/input validation on the render html function before allowing it to be called by the extract() function, a PHP built-in function. This allows the supplied args/input to overwrite the $pagepath variable, potentially leading to a local file inclusion attack. The issue can be demonstrated by the shortcode parameter in a woof redraw woof action.

Recommendations For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue. As a temporary workaround, consider disabling the render html function until a patch is available. Restrict access to the woof redraw woof action to minimize the risk of exploitation. Avoid using the shortcode parameter in the affected action until the issue is resolved.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-8711

Produtos afetados

Woocommerce Products Filter

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-8711 · Nota de Segurança
• https://wordpress.org/plugins/woocommerce-products-filter/#developers · Nota
• https://osv.dev/vulnerability/CVE-2018-8711 · Aviso do Fabricante
• https://sec-consult.com/en/blog/advisories/arbitrary-shortcode-execution-local-file-inclusion-in-woof-pluginus-net/index.html · Nota
• https://woocommerce-filter.com/update-woocommerce-products-filter-v-2-2-0 · Aviso do Fabricante