PT-2023-6275 · Unknown · Reciply Plugin

CVE-2011-10004 · Publicado 2023-10-15 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions reciply Plugin versions 1.1.7 and earlier

Description A critical issue affects the processing of the file uploadImage.php, leading to unrestricted upload. The attack may be initiated remotely, potentially allowing an attacker to execute arbitrary code.

Recommendations For reciply Plugin versions 1.1.7 and earlier, upgrade to version 1.1.8 to address this issue. As a temporary workaround, consider restricting access to the uploadImage.php file until the upgrade is applied.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

BDU:2023-06985

CVE-2011-10004

Produtos afetados

Reciply Plugin

Referências · 8

• https://github.com/wp-plugins/reciply/commit/e3ff616dc08d3aadff9253f1085e13f677d0c676 · Correção
• https://vuldb.com/?ctiid.242189 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-10004 · Nota
• https://t.me/cvenotify/59563 · Publicação no Telegram
• https://t.me/cibsecurity/72396 · Publicação no Telegram
• https://vuldb.com/?id.242189 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-10004 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-06985 · Nota de Segurança