PT-2023-25547 · WordPress · Wp Project Manager

Chloe Chamberland + 2 · Publicado 2023-08-31 · Atualizado 2023-09-05 · CVE-2023-3636

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP Project Manager plugin for WordPress versions up to, and including, 2.6.4

Description The issue allows authenticated attackers with minimal permissions, such as a subscriber, to modify their user role. This is possible due to insufficient restriction on the save users map name function, which can be exploited by supplying the usernames parameter.

Recommendations For WP Project Manager plugin for WordPress versions up to, and including, 2.6.4, consider disabling the save users map name function until a patch is available to prevent privilege escalation. Restrict access to the usernames parameter in the affected function to minimize the risk of exploitation.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2023-3636

Produtos afetados

Wp Project Manager

Referências · 6

• https://wordfence.com/threat-intel/vulnerabilities/id/6a5e4708-db3e-483c-852f-1a487825cf92?source=cve · Nota
• https://osv.dev/vulnerability/CVE-2023-3636 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-3636 · Nota de Segurança
• https://plugins.trac.wordpress.org/browser/wedevs-project-manager/tags/2.6.3/src/User/Controllers/User_Controller.php#L158 · Nota
• https://t.me/cibsecurity/69525 · Publicação no Telegram
• https://plugins.trac.wordpress.org/changeset/2942291/wedevs-project-manager#file1792 · Correção