PT-2024-33483 · WordPress · Canto

Sushi Com Abacate · Published 2024-06-14 · Updated 2024-08-06 · CVE-2024-4936

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Canto plugin for WordPress versions up to, and including, 3.0.8

Description The issue allows unauthenticated attackers to include remote files on the server, resulting in code execution. This is achieved via the abspath parameter and requires allow url include to be enabled on the target site in order to exploit.

Recommendations For versions up to, and including, 3.0.8, update to a version later than 3.0.8 to resolve the issue. As a temporary workaround, consider disabling the abspath parameter until a patch is available. Restrict access to the Canto plugin to minimize the risk of exploitation, and ensure allow url include is disabled to prevent code execution.

Fix

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2024-4936

Affected Products

Canto

References · 7

• https://wordfence.com/threat-intel/vulnerabilities/id/95a68ae0-36da-499b-a09d-4c91db8aa338?source=cve · Patch
• https://osv.dev/vulnerability/CVE-2024-4936 · Vendor Advisory
• https://plugins.trac.wordpress.org/browser/canto/trunk/includes/lib/sizes.php#L15 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-4936 · Security Note
• https://twitter.com/CVEnew/status/1801547351527498097 · Twitter Post
• https://t.me/cvenotify/83247 · Telegram Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3105443%40canto&new=3104074%40canto&sfp_email=&sfph_mail= · Note