PT-2021-15844 · Monolog+1 · Monolog+1

Darkpills + 1 · Published 2021-05-24 · Updated 2022-05-03 · CVE-2021-24307

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings versions prior to 4.1.0.2

Description The issue allows authenticated users with aioseo tools settings privilege, typically admins, to execute arbitrary code on the host. This is possible because the plugin attempts to unserialize values from uploaded .ini files in the "Tool > Import/Export" section. The embedded Monolog library can be exploited to create a gadget chain, leading to system command execution.

Recommendations For versions prior to 4.1.0.2, update to version 4.1.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the "Tool > Import/Export" section and the aioseo tools settings privilege to minimize the risk of exploitation. Avoid uploading .ini files from untrusted sources until the issue is resolved.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2021-24307

Affected Products

All In One Seo

Monolog

References · 8

• 🔥 https://github.com/darkpills/CVE-2021-24307-all-in-one-seo-pack-admin-rce · Exploit
• 🔥 https://wpscan.com/vulnerability/ab2c94d2-f6c4-418b-bd14-711ed164bcf1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24307 · Security Note
• https://aioseo.com/changelog · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-24307 · Vendor Advisory
• https://t.me/cvenotify/15217 · Telegram Post
• https://t.me/cybersecuritytechnologies/5118 · Telegram Post
• https://t.me/cvenotify/29612 · Telegram Post