PT-2023-17545 · WordPress · Advanced File Manager Shortcodes

Mateus Machado Tesser · Publicado 2023-06-27 · Atualizado 2026-03-10 · CVE-2023-2068

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions File Manager Advanced Shortcode WordPress plugin versions 2.3.2 and earlier

Description The issue arises from inadequate prevention of uploading files with disallowed MIME types when using the shortcode, leading to remote code execution (RCE) in cases where the allowed MIME type list does not include PHP files. This can be exploited by unauthenticated users in the worst-case scenario.

Recommendations For versions 2.3.2 and earlier, update to a version that includes a fix for this issue to prevent the uploading of files with disallowed MIME types. As a temporary workaround, consider restricting access to the shortcode or disabling it until a patch is available. Restrict the allowed MIME type list to only include necessary file types to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2023-2068

Produtos afetados

Advanced File Manager Shortcodes

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_plugin_fma_shortcode_unauth_rce.rb · Exploit
• 🔥 https://exploit-db.com/exploits/51505 · Exploit
• 🔥 https://wpscan.com/vulnerability/58f72953-56d2-4d86-a49b-311b5fc58056 · Exploit
• 🔥 http://packetstormsecurity.com/files/173735/WordPress-File-Manager-Advanced-Shortcode-2.3.2-Remote-Code-Execution.html · Exploit
• https://t.me/cvenotify/55108 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-2068 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-2068 · Aviso do Fabricante