PT-2024-37638 · WordPress+1 · Ai Engine Wordpress Plugin+1

Karolis Narvilas · Published 2024-08-18 · Updated 2024-08-23 · CVE-2024-6451

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AI Engine versions < 2.4.3 AI Engine WordPress plugin versions prior to 2.5.1

Description The issue is related to remote-code-execution (RCE) via Log Poisoning. The AI Engine WordPress plugin fails to validate the file extension of logs path, allowing Administrators to change log filetypes from .log to .php. This can lead to potential security risks.

Recommendations For AI Engine versions < 2.4.3, update to version 2.4.3 or later to resolve the issue. For AI Engine WordPress plugin versions prior to 2.5.1, update to version 2.5.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the logs path variable to minimize the risk of exploitation.

Exploit

Fix

RCE

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2024-6451

Affected Products

Ai Engine

Ai Engine Wordpress Plugin

References · 8

• 🔥 https://wpscan.com/vulnerability/fc06d413-a227-470c-a5b7-cdab57aeab34 · Exploit
• https://osv.dev/vulnerability/CVE-2024-6451 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6451 · Security Note
• https://twitter.com/VulmonFeeds/status/1825486487133036767 · Twitter Post
• https://twitter.com/cracbot/status/1826862044177408251 · Twitter Post
• https://twitter.com/cracbot/status/1827224384131477953 · Twitter Post
• https://t.me/cvedetector/3510 · Telegram Post
• https://twitter.com/CVEnew/status/1825417656897241165 · Twitter Post