PT-2022-13217 · WordPress · Sermon Browser

Krishna Harsha Kondaveeti · Published 2022-03-28 · Updated 2022-04-04 · CVE-2022-0499

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sermon Browser WordPress plugin versions 0.45.22 and earlier

Description The issue allows attackers to make a logged-in admin upload arbitrary files, such as PHP files, due to the lack of CSRF checks and file validation when uploading Sermon files. This can be exploited by attackers to upload malicious files.

Recommendations For Sermon Browser WordPress plugin versions 0.45.22 and earlier, consider disabling the file upload feature until a patch is available to prevent exploitation. Restrict access to the file upload functionality to minimize the risk of arbitrary file uploads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

CSRF

Weakness Enumeration

CWE-434

CWE-352

Related Identifiers

CVE-2022-0499

Affected Products

Sermon Browser

References · 5

• 🔥 https://wpscan.com/vulnerability/e9ccf1fc-1dbf-4a41-bf4a-90af20b286d6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-0499 · Security Note
• https://osv.dev/vulnerability/CVE-2022-0499 · Vendor Advisory
• https://t.me/cvenotify/28418 · Telegram Post
• https://t.me/cibsecurity/39661 · Telegram Post