PT-2023-32829 · WordPress · Backup Migration

Hiroho Shimada

+1

·

Publicado

2023-12-22

·

Atualizado

2026-04-08

·

CVE-2023-6972

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Backup Migration plugin for WordPress versions up to, and including, 1.3.9
Description The issue allows unauthenticated attackers to perform Path Traversal via the content-backups and content-name, content-manifest, or content-bmitmp and content-identy HTTP headers. This enables the deletion of arbitrary files, including the wp-config.php file, potentially leading to site takeover and remote code execution.
Recommendations For versions up to, and including, 1.3.9, update to a version later than 1.3.9 to resolve the issue. As a temporary workaround, consider restricting access to the content-backups, content-name, content-manifest, content-bmitmp, and content-identy HTTP headers until a patch is available. Avoid using the affected HTTP headers in the Backup Migration plugin until the issue is resolved.

Correção

RCE

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-6972

Produtos afetados

Backup Migration