PT-2022-6789 · Click5 · Sitemap

Cydave · Published 2022-05-02 · Updated 2023-08-08 · CVE-2022-0952

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sitemap by click5 WordPress plugin versions prior to 1.0.36

Description The issue is related to the lack of authorization and CSRF checks when updating options via a REST endpoint, and the failure to ensure that the option to be updated belongs to the plugin. This allows unauthenticated attackers to change arbitrary blog options, such as the users can register and default role, enabling them to create a new admin account and take over the blog.

Recommendations For versions prior to 1.0.36, update to version 1.0.36 or later to resolve the issue. As a temporary workaround, consider restricting access to the REST endpoint used for updating options until a patch is applied. Additionally, restrict the ability to change blog options, such as users can register and default role, to authorized users only.

Exploit

Fix

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

BDU:2023-04702

CVE-2022-0952

Affected Products

Sitemap

References · 9

• 🔥 https://github.com/RandomRobbieBF/CVE-2022-0952 · Exploit
• 🔥 https://wpscan.com/vulnerability/0f694961-afab-44f9-846c-e80a0f6c768b · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-0952 · Security Note
• https://osv.dev/vulnerability/CVE-2022-0952 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04702 · Security Note
• https://t.me/cvenotify/53640 · Telegram Post
• https://t.me/cibsecurity/41744 · Telegram Post
• https://t.me/cybersecuritytechnologies/8812 · Telegram Post
• https://twitter.com/ksg93rd/status/1688971778175930368 · Twitter Post