PT-2021-15917 · WordPress · Joomsport

Bugbang · Published 2021-07-06 · Updated 2021-07-09 · CVE-2021-24384

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JoomSport WordPress plugin versions prior to 5.1.8

Description The issue arises from the joomsport md load AJAX action in the JoomSport WordPress plugin, which unserializes user input from the shattr POST parameter. This leads to a PHP Object Injection issue. Although the plugin itself does not have a suitable gadget chain to exploit this, the presence of other installed plugins could potentially lead to more severe issues, such as Remote Code Execution (RCE).

Recommendations For versions prior to 5.1.8, update to version 5.1.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the joomsport md load AJAX action until a patch is available. Avoid using the shattr parameter in the affected AJAX endpoint until the issue is resolved.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2021-24384

Affected Products

Joomsport

References · 4

• 🔥 https://wpscan.com/vulnerability/fb6c407c-713c-4e83-92ce-4e5f791be696 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24384 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24384 · Vendor Advisory
• https://t.me/cvenotify/17117 · Telegram Post