PT-2024-11034 · WordPress · 3Dprint Lite

Spacehen · Published 2024-02-05 · Updated 2024-08-01 · CVE-2021-4436

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 3DPrint Lite WordPress plugin versions prior to 1.9.1.5

Description The issue allows unauthenticated users to upload arbitrary files to the web server due to the lack of authorization and file checking in the p3dlite handle upload AJAX action. However, a .htaccess file prevents the uploaded files from being accessed on web servers like Apache. This vulnerability has been exploited by hackers to deploy the Godzilla Web Shell.

Recommendations For versions prior to 1.9.1.5, update to version 1.9.1.5 or later to resolve the issue. As a temporary workaround, consider disabling the p3dlite handle upload AJAX action until a patch is available. Restrict access to the vulnerable p3dlite handle upload AJAX action to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-4436

Affected Products

3Dprint Lite

References · 11

• 🔥 https://wpscan.com/vulnerability/c46ecd0d-a132-4ad6-b936-8acde3a09282 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-4436 · Security Note
• https://osv.dev/vulnerability/CVE-2021-4436 · Vendor Advisory
• https://twitter.com/ET_Labs/status/1754992163039924348 · Twitter Post
• https://twitter.com/CVEnew/status/1754436254324965645 · Twitter Post
• https://t.me/breachdetector/497907 · Telegram Post
• https://twitter.com/shah_sheikh/status/1765257787351966198 · Twitter Post
• https://twitter.com/f1tym1/status/1765289908749377820 · Twitter Post
• https://t.me/cvenotify/70044 · Telegram Post
• https://t.me/breachdetector/456754 · Telegram Post
• https://t.me/cvenotify/70911 · Telegram Post