PT-2021-15767 · WordPress · N5 Upload Form

Jin Huang · Published 2021-04-12 · Updated 2021-04-20 · CVE-2021-24223

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: N5 Upload Form WordPress plugin versions 1.0 and earlier

Description: The issue allows for arbitrary file upload in pages where a form from the plugin is embedded, enabling any file to be uploaded. The filename is generated using md5(uniqid(rand())), making it difficult to guess. However, if the server is misconfigured with directory listing enabled, accessing the uploaded file becomes straightforward.

Recommendations: For N5 Upload Form WordPress plugin versions 1.0 and earlier, update to a version that addresses the arbitrary file upload issue. As a temporary workaround, consider disabling the file upload functionality in the plugin until a patch is available. Restrict access to the directory where uploaded files are stored to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-24223

Affected Products

N5 Upload Form

References · 5

• 🔥 https://github.com/jinhuang1102/CVE-ID-Reports/blob/12863f80ced5361e2e2c3f7209566ab3730aa37b/N5_upload.md · Exploit
• 🔥 https://wpscan.com/vulnerability/d7a72183-0cd1-45de-b98b-2e295b27e5db · Exploit
• https://osv.dev/vulnerability/CVE-2021-24223 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24223 · Security Note
• https://t.me/cvenotify/13496 · Telegram Post