PT-2026-1280 · Unknown · Media File Renamer

CVE-2023-50897 · Publicado 2026-01-05 · Atualizado 2026-01-05

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Media File Renamer versions through 5.7.7

Description The software contains a flaw related to unrestricted file uploads, allowing the use of malicious files. This can lead to potential cyber security risks. The issue involves the ability to rename uploaded PHP files, potentially bypassing security measures and creating a remote code execution (RCE) kill chain.

Recommendations Versions prior to 5.7.7 should be updated.

Correção

RCE

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2023-50897

Produtos afetados

Media File Renamer

Referências · 4

• https://twitter.com/CveFindCom/status/2008186511955534150 · Publicação no Twitter
• https://vdp.patchstack.com/database/wordpress/plugin/media-file-renamer/vulnerability/wordpress-media-file-renamer-plugin-5-7-7-arbitrary-file-rename-lead-to-rce-vulnerability?_s_id=cve · Nota
• https://twitter.com/0dayPublishing/status/2008171848161177720 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-50897 · Nota de Segurança