PT-2022-20752 · Ithemes · Ithemes Backupbuddy

Lew Ayotte & Timothy Jacobs · Published 2022-09-09 · Updated 2024-05-07 · CVE-2022-31474

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iThemes BackupBuddy versions 8.5.8.0 through 8.7.4.1

Description The issue affects the iThemes BackupBuddy plugin, allowing unauthorized users to upload arbitrary files from a vulnerable site, potentially containing confidential information. This is due to a Path Traversal vulnerability, also known as Improper Limitation of a Pathname to a Restricted Directory. Approximately 5 million attempts to exploit this vulnerability have been detected, targeting the BackupBuddy plugin, which has around 140,000 active installations.

Recommendations For iThemes BackupBuddy versions 8.5.8.0 through 8.7.4.1, update to version 8.7.5 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories on the server to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-31474

Affected Products

Ithemes Backupbuddy

References · 9

• https://osv.dev/vulnerability/CVE-2022-31474 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31474 · Security Note
• https://ithemes.com/blog/wordpress-vulnerability-report-special-edition-september-6-2022-backupbuddy · Vendor Advisory
• https://t.me/pentestingnews/28025 · Telegram Post
• https://t.me/echeloneyes/665 · Telegram Post
• https://patchstack.com/database/vulnerability/backupbuddy/wordpress-backup-buddy-plugin-8-5-8-0-8-7-4-1-unauthenticated-path-traversal-arbitrary-file-download-vulnerability?_s_id=cve · Note
• https://t.me/true_secator/3395 · Telegram Post
• https://t.me/pentestingnews/27801 · Telegram Post
• https://t.me/cibsecurity/59894 · Telegram Post