PT-2023-15934 · WordPress · The Flyingpress

Jerome Bruandet · CVE-2022-4948 · Publicado 2023-06-07 · Atualizado 2023-06-13

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions The FlyingPress plugin for WordPress versions up to, and including, 3.9.6

Description The issue allows authenticated attackers with subscriber-level permissions and above to bypass authorization and interact with the plugin in unintended ways. This can be exploited through AJAX actions, specifically the "save config" action, which enables configuration of an external CDN. An attacker could use this to include malicious javascript from a source under their control.

Recommendations For The FlyingPress plugin for WordPress versions up to, and including, 3.9.6, update to a version that includes a fix for the missing capability check on its AJAX actions to prevent authorization bypass.

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2022-4948

Produtos afetados

The Flyingpress

Referências · 4

• 🔥 https://blog.nintechnet.com/wordpress-flyingpress-plugin-fixed-broken-access-control-vulnerability · Exploit
• https://osv.dev/vulnerability/CVE-2022-4948 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-4948 · Nota de Segurança
• https://wordfence.com/threat-intel/vulnerabilities/id/6d1d541b-7010-4dbf-9b1c-d59c84390065?source=cve · Nota