PT-2023-32523 · WordPress · Duplicator+1
Dmitry Ignatyev
·
Publicado
2023-12-14
·
Atualizado
2024-02-21
·
CVE-2023-6114
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Duplicator WordPress plugin versions prior to 1.5.7.1
Duplicator Pro WordPress plugin versions prior to 4.5.14.2
Description
The issue concerns the Duplicator WordPress plugin and its Pro version, where the
backups-dup-lite/tmp directory (or backups-dup-pro/tmp in the Pro version) is not properly restricted, allowing unauthenticated attackers to access sensitive files when directory listing is enabled in the web server. These sensitive files include a full database dump and a zip archive of the site.Recommendations
For Duplicator WordPress plugin versions prior to 1.5.7.1, update to version 1.5.7.1 or later.
For Duplicator Pro WordPress plugin versions prior to 4.5.14.2, update to version 4.5.14.2 or later.
As a temporary workaround, consider disabling directory listing in the web server to minimize the risk of exploitation. Restrict access to the
backups-dup-lite/tmp and backups-dup-pro/tmp directories to prevent unauthorized access to sensitive files.Exploit
Correção
Files Accessible to External Parties
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Duplicator
Duplicator Pro