PT-2022-17789 · WordPress · All-In-One Video Gallery

Gabriele Zuddas · Published 2022-09-06 · Updated 2024-01-11 · CVE-2022-2633

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions All-in-One Video Gallery plugin for WordPress versions up to, and including 2.6.0

Description The issue allows unauthenticated users to download sensitive files hosted on the affected server and forge requests to the server via the dl parameter found in the ~/public/video.php file. This enables arbitrary file downloads and blind server-side request forgery.

Recommendations For versions up to, and including 2.6.0, consider disabling access to the ~/public/video.php file or restricting the use of the dl parameter until a patch is available. Avoid using the dl parameter in the affected API endpoint until the issue is resolved.

Fix

Weakness Enumeration

CWE-610

Related Identifiers

CVE-2022-2633

Affected Products

All-In-One Video Gallery

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2022-2633 · Security Note
• https://plugins.trac.wordpress.org/changeset/2768384/all-in-one-video-gallery/trunk/public/video.php · Patch
• https://plugins.trac.wordpress.org/browser/all-in-one-video-gallery/trunk/public/video.php#L227 · Patch
• https://osv.dev/vulnerability/CVE-2022-2633 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2744708%40all-in-one-video-gallery&new=2744708%40all-in-one-video-gallery&sfp_email=&sfph_mail= · Patch
• https://wordfence.com/threat-intel/vulnerabilities/id/83b0534e-1b8d-46a8-9698-e7ca73e5ab57?source=cve · Note
• https://wordfence.com/vulnerability-advisories/#CVE-2022-2633 · Note
• https://t.me/cibsecurity/49332 · Telegram Post