PT-2023-31720 · WordPress · Wordpress

Alex Thomas · Published 2023-10-31 · Updated 2023-11-13 · CVE-2023-5099

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HTML filter and csv-file search plugin for WordPress versions up to, and including, 2.7

Description The issue allows authenticated attackers with contributor-level permissions and above to include and execute arbitrary files on the server via the src attribute of the csvsearch shortcode. This can lead to bypassing access controls, obtaining sensitive data, or achieving code execution, especially in cases where images and other “safe” file types can be uploaded and included.

Recommendations For versions up to, and including, 2.7, consider disabling the csvsearch shortcode until a patch is available to prevent the inclusion and execution of arbitrary files. Restrict access to the src attribute to minimize the risk of exploitation. Avoid using the src attribute in the csvsearch shortcode until the issue is resolved.

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

CWE-98

Related Identifiers

CVE-2023-5099

Affected Products

Wordpress

References · 5

• https://osv.dev/vulnerability/CVE-2023-5099 · Vendor Advisory
• https://wordfence.com/threat-intel/vulnerabilities/id/ee2b4055-8cbd-49b7-bb0b-eddef85060fc?source=cve · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-5099 · Security Note
• https://plugins.trac.wordpress.org/changeset/2985200/hk-filter-and-search · Patch
• https://t.me/cibsecurity/73220 · Telegram Post