PT-2023-32569 · WordPress · Quttera Web Malware Scanner

Dmitry Ignatyev · Published 2023-12-18 · Updated 2024-09-30 · CVE-2023-6222

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Quttera Web Malware Scanner WordPress plugin versions prior to 3.4.2.1

Description The issue concerns a lack of validation for user input used in a path. This could potentially allow users with an admin role to perform path traversal attacks.

Recommendations For versions prior to 3.4.2.1, update to version 3.4.2.1 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-6222

Affected Products

Quttera Web Malware Scanner

References · 5

• 🔥 https://drive.google.com/file/d/1krgHH2NvVFr93VpErLkOjDV3L6M5yIA1/view?usp=sharing · Exploit
• 🔥 https://wpscan.com/vulnerability/df892e99-c0f6-42b8-a834-fc55d1bde130 · Exploit
• https://osv.dev/vulnerability/CVE-2023-6222 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6222 · Security Note
• https://twitter.com/CVEnew/status/1736842776250134751 · Twitter Post