PT-2021-22525 · WordPress · Zoomsounds

Digitaljessica Ltd · Published 2021-08-31 · Updated 2024-08-18 · CVE-2021-39316

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Zoomsounds plugin versions <= 6.45 for WordPress

Description: The issue allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the dzsap download action using directory traversal in the link parameter.

Recommendations: For Zoomsounds plugin versions <= 6.45, update to a version greater than 6.45 to resolve the issue. As a temporary workaround, consider restricting access to the dzsap download action to minimize the risk of exploitation. Avoid using the link parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Files Accessible to External Parties

Path traversal

Weakness Enumeration

CWE-552

CWE-22

Related Identifiers

CVE-2021-39316

Affected Products

Zoomsounds

References · 7

• 🔥 http://packetstormsecurity.com/files/165146/WordPress-DZS-Zoomsounds-6.45-Arbitrary-File-Read.html · Exploit
• 🔥 https://exploit-db.com/exploits/50564 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-39316 · Security Note
• https://osv.dev/vulnerability/CVE-2021-39316 · Vendor Advisory
• https://t.me/cibsecurity/28082 · Telegram Post
• https://wordfence.com/vulnerability-advisories/#CVE-2021-39316 · Note
• https://twitter.com/soltanali0/status/1825307777322848273 · Twitter Post