PT-2024-38462 · WordPress · Bit File Manager

Siunam + 1 · Published 2024-09-04 · Updated 2024-09-11 · CVE-2024-7627

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bit File Manager plugin for WordPress versions 6.0 through 6.5.5

Description The issue is related to Remote Code Execution. This occurs due to the plugin writing a temporary file to a publicly accessible directory before performing file validation, specifically through the checkSyntax function. This makes it possible for unauthenticated attackers to execute code on the server if an administrator has allowed Guest User read permissions.

Recommendations For versions 6.0 through 6.5.5, consider disabling the checkSyntax function as a temporary workaround until a patch is available. Restrict access to the plugin's functionality to minimize the risk of exploitation, especially if Guest User read permissions are enabled. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Race Condition

Weakness Enumeration

CWE-94

CWE-362

Related Identifiers

CVE-2024-7627

Affected Products

Bit File Manager

References · 15

• https://plugins.trac.wordpress.org/changeset/3138710 · Patch
• https://osv.dev/vulnerability/CVE-2024-7627 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7627 · Security Note
• https://t.me/latest_high_impact_cve/1100 · Telegram Post
• https://twitter.com/cracbot/status/1833384956908998712 · Twitter Post
• https://twitter.com/AegisLens/status/1832152045949767886 · Twitter Post
• https://plugins.trac.wordpress.org/browser/file-manager/trunk/backend/app/Providers/FileEditValidator.php#L88 · Note
• https://twitter.com/CVEnew/status/1831526674900324503 · Twitter Post
• https://t.me/cvenotify/93268 · Telegram Post
• https://twitter.com/AegisLens/status/1831664852072366345 · Twitter Post
• https://plugins.trac.wordpress.org/browser/file-manager/trunk/backend/app/Providers/FileEditValidator.php#L39 · Note
• https://twitter.com/AegisLens/status/1831829884487753947 · Twitter Post
• https://t.me/cvedetector/4878 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/5f29de7a-3f15-4b6d-aad7-6a08151e2113?source=cve · Note
• https://twitter.com/VulmonFeeds/status/1831569126461960592 · Twitter Post