PT-2023-31720 · WordPress · Wordpress

Alex Thomas · Publicado 2023-10-31 · Atualizado 2023-11-13 · CVE-2023-5099

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HTML filter and csv-file search plugin for WordPress versions up to, and including, 2.7

Description The issue allows authenticated attackers with contributor-level permissions and above to include and execute arbitrary files on the server via the src attribute of the csvsearch shortcode. This can lead to bypassing access controls, obtaining sensitive data, or achieving code execution, especially in cases where images and other “safe” file types can be uploaded and included.

Recommendations For versions up to, and including, 2.7, consider disabling the csvsearch shortcode until a patch is available to prevent the inclusion and execution of arbitrary files. Restrict access to the src attribute to minimize the risk of exploitation. Avoid using the src attribute in the csvsearch shortcode until the issue is resolved.

Correção

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-552

CWE-98

Identificadores relacionados

CVE-2023-5099

Produtos afetados

Wordpress

Referências · 5

• https://t.me/cibsecurity/73220 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-5099 · Aviso do Fabricante
• https://wordfence.com/threat-intel/vulnerabilities/id/ee2b4055-8cbd-49b7-bb0b-eddef85060fc?source=cve · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2023-5099 · Nota de Segurança
• https://plugins.trac.wordpress.org/changeset/2985200/hk-filter-and-search · Correção