PT-2018-4232 · WordPress · Gravity Upload Ajax Plugin

Publicado 2018-01-08 · Atualizado 2018-02-01 · CVE-2014-4972

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Gravity Upload Ajax plugin versions 1.1 and earlier for WordPress

Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under wp-content/uploads/gravity forms.

Recommendations For Gravity Upload Ajax plugin versions 1.1 and earlier, consider disabling the file upload functionality until a patch is available. Restrict access to the wp-content/uploads/gravity forms directory to minimize the risk of exploitation. Avoid using executable file extensions in uploads to prevent arbitrary code execution.

Exploit

Correção

RCE

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2014-4972

Produtos afetados

Gravity Upload Ajax Plugin

Referências · 4

• 🔥 https://g0blin.co.uk/cve-2014-4972 · Exploit
• https://wpvulndb.com/vulnerabilities/8232 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4972 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4972 · Nota