PT-2023-32528 · WordPress · Welcart E-Commerce

Marco Wotschka · Published 2023-12-09 · Updated 2023-12-12 · CVE-2023-6120

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce plugin for WordPress versions up to, and including, 2.9.6

Description The issue allows administrators to upload .pem or .crt files to arbitrary locations on the server via the upload certificate file function, making it possible for them to traverse directories.

Recommendations For versions up to, and including, 2.9.6, consider disabling the upload certificate file function until a patch is available to prevent arbitrary file uploads.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-6120

Affected Products

Welcart E-Commerce

References · 8

• https://osv.dev/vulnerability/CVE-2023-6120 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6120 · Security Note
• https://twitter.com/CVEnew/status/1733384350891221305 · Twitter Post
• https://plugins.trac.wordpress.org/changeset/2992785/usc-e-shop/trunk/classes/paymentPaygent.class.php?contextall=1&old=2880236&old_path=%2Fusc-e-shop%2Ftrunk%2Fclasses%2FpaymentPaygent.class.php · Note
• https://t.me/cvenotify/63096 · Telegram Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2999846%40usc-e-shop%2Ftrunk&old=2996147%40usc-e-shop%2Ftrunk&sfp_email=&sfph_mail=#file1 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/2677cea6-d60d-4e10-afd7-e088a5592b19?source=cve · Note
• https://twitter.com/VulmonFeeds/status/1733451822054981709 · Twitter Post