PT-2023-11850 · Activello+10 · Activello+15

Jerome Bruandet · Published 2023-06-07 · Updated 2023-06-16 · CVE-2020-36708

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Shapely versions up to and including 1.2.7 NewsMag versions up to and including 2.4.1 Activello versions up to and including 1.4.0 Illdy versions up to and including 2.1.4 Allegiant versions up to and including 1.2.2 Newspaper X versions up to and including 1.3.1 Pixova Lite versions up to and including 2.0.5 Brilliance versions up to and including 1.2.7 MedZone Lite versions up to and including 1.2.4 Regina Lite versions up to and including 2.0.4 Transcend versions up to and including 1.1.8 Affluent versions up to and including 1.1.0 Bonkers versions up to and including 1.0.4 Antreas versions up to and including 1.0.2 Sparkling versions up to and including 2.4.8 NatureMag Lite versions up to and including 1.0.4

Description The issue is related to Function Injections due to epsilon framework ajax action, allowing unauthenticated attackers to call functions and achieve remote code execution.

Recommendations For each of the affected themes, update to a version later than the specified version to resolve the issue. Shapely: update to a version later than 1.2.7 NewsMag: update to a version later than 2.4.1 Activello: update to a version later than 1.4.0 Illdy: update to a version later than 2.1.4 Allegiant: update to a version later than 1.2.2 Newspaper X: update to a version later than 1.3.1 Pixova Lite: update to a version later than 2.0.5 Brilliance: update to a version later than 1.2.7 MedZone Lite: update to a version later than 1.2.4 Regina Lite: update to a version later than 2.0.4 Transcend: update to a version later than 1.1.8 Affluent: update to a version later than 1.1.0 Bonkers: update to a version later than 1.0.4 Antreas: update to a version later than 1.0.2 Sparkling: update to a version later than 2.4.8 NatureMag Lite: update to a version later than 1.0.4

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2020-36708

Affected Products

Activello

Affluent

Allegiant

Antreas

Bonkers

Brilliance

Illdy

Medzone Lite

Naturemag Lite

Newsmag

Newspaper

Pixova Lite

Regina Lite

Shapely

Sparkling

Transcend

References · 7

• 🔥 https://blog.nintechnet.com/unauthenticated-function-injection-vulnerability-in-wordpress-sparkling-theme · Exploit
• 🔥 https://blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36708 · Security Note
• https://osv.dev/vulnerability/CVE-2020-36708 · Vendor Advisory
• https://wpscan.com/vulnerability/bec52a5b-c892-4763-a962-05da7100eca5 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/5b75c322-539d-44e9-8f26-5ff929874b67?source=cve · Note
• https://wordfence.com/blog/2020/11/large-scale-attacks-target-epsilon-framework-themes · Note