PT-2024-20610 · Unknown · Knowledge Base For Documentation

Ngô Thiên An · Published 2024-02-19 · Updated 2024-03-27 · CVE-2024-24842

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Knowledge Base for Documentation, FAQs with AI Assistance versions n/a through 11.30.2

Description The issue is related to Deserialization of Untrusted Data, which affects the Knowledge Base for Documentation, FAQs with AI Assistance plugin. This plugin has over 10,000 active installations.

Recommendations For versions n/a through 11.30.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-24842

Affected Products

Knowledge Base For Documentation

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-24842 · Security Note
• https://twitter.com/ancorn_/status/1759570540908392760 · Twitter Post
• https://patchstack.com/database/vulnerability/echo-knowledge-base/wordpress-knowledge-base-for-documentation-faqs-with-ai-assistance-plugin-11-30-2-php-object-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1772864283476705591 · Twitter Post
• https://t.me/cvenotify/74798 · Telegram Post