PT-2023-4778 · WordPress · Forminator

Mehmet · Publicado 2023-07-20 · Atualizado 2023-09-06 · CVE-2023-4596

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Forminator plugin for WordPress versions up to, and including, 1.24.6

Description The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server in the upload post image() function. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server, which may make remote code execution possible. The vulnerability affects over 400,000 sites.

Recommendations For Forminator plugin for WordPress versions up to, and including, 1.24.6: Update to a version later than 1.24.6 to resolve the issue. As a temporary workaround, consider disabling the upload post image() function until a patch is available. Restrict access to the upload functionality to minimize the risk of exploitation.

Exploit

Correção

RCE

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

BDU:2023-05225

CVE-2023-4596

Produtos afetados

Forminator

Referências · 18

• 🔥 https://github.com/E1A/CVE-2023-4596 · Exploit
• 🔥 https://exploit-db.com/exploits/51664 · Exploit
• https://twitter.com/zoomeye_team/status/1699355343279845826 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1696709502798590415 · Publicação no Twitter
• https://t.me/pentestingnews/38935 · Publicação no Telegram
• https://t.me/netlas/89 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-05225 · Nota de Segurança
• https://plugins.trac.wordpress.org/changeset/2954409/forminator/trunk/library/fields/postdata.php · Correção
• https://wordfence.com/threat-intel/vulnerabilities/id/9cd87da6-1f4c-4a15-8ebb-6e0f8ef72513?source=cve · Nota
• https://twitter.com/the_yellow_fall/status/1696721138015973544 · Publicação no Twitter
• https://twitter.com/Netlas_io/status/1698659674089050271 · Publicação no Twitter
• https://twitter.com/7hreathunter/status/1698580638754816340 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-4596 · Aviso do Fabricante
• https://twitter.com/TodayCyberNews/status/1698660901845700942 · Publicação no Twitter
• https://twitter.com/trancongly85/status/1698702244936597784 · Publicação no Twitter