PT-2024-17417 · WordPress · The Management App For Woocommerce

Lucio Sá · Published 2024-03-20 · Updated 2024-03-21 · CVE-2024-1205

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring plugin for WordPress version 1.2.0 and earlier

Description The issue is related to arbitrary file uploads due to missing file type validation in the nouvello upload csv file function. This allows authenticated attackers with subscriber-level access and above to upload arbitrary files on the affected site's server, potentially making remote code execution possible.

Recommendations For versions 1.2.0 and earlier, update the plugin to a version that includes the fix for the arbitrary file upload issue. As a temporary workaround, consider disabling the nouvello upload csv file function until a patch is available. Restrict access to the uploads folder to minimize the risk of exploitation.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-1205

Affected Products

The Management App For Woocommerce

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-1205 · Security Note
• https://osv.dev/vulnerability/CVE-2024-1205 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1770398349088194936 · Twitter Post
• https://twitter.com/oktsec/status/1770948949874024641 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/a4219c10-9d2a-429d-9ac7-61efc02bd4cf?source=cve · Note
• https://plugins.trac.wordpress.org/browser/wemanage-app-worker/trunk/includes/class-nouvello-wemanage-worker-api-wc-ext-controller.php#L166 · Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3056070%40wemanage-app-worker&new=3056070%40wemanage-app-worker&sfp_email=&sfph_mail= · Note
• https://plugins.trac.wordpress.org/browser/wemanage-app-worker/trunk/includes/class-nouvello-wemanage-worker-api-wc-ext-controller-functions.php#L982 · Note
• https://twitter.com/cracbot/status/1770899583993843726 · Twitter Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3057589%40wemanage-app-worker&new=3057589%40wemanage-app-worker&sfp_email=&sfph_mail= · Note