PT-2024-6122 · Microsoft · Windows

1337_Wannabe + 1 · Published 2024-07-10 · Updated 2024-09-03 · CVE-2024-6500

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions InPost for WooCommerce plugin versions 1.4.0 and earlier InPost PL plugin for WordPress versions 1.4.4 and earlier

Description The issue is related to a missing capability check on the parse request function, allowing unauthorized access and deletion of data. This makes it possible for unauthenticated attackers to read and delete arbitrary files on Windows servers, while on Linux servers, only files within the WordPress install will be deleted, but all files can be read. Over 10,000 WordPress sites are at risk due to this critical file deletion flaw.

Recommendations For InPost for WooCommerce plugin versions 1.4.0 and earlier, update to version 1.4.5 or later. For InPost PL plugin for WordPress versions 1.4.4 and earlier, update to a version later than 1.4.4. As a temporary workaround, consider disabling the parse request function until a patch is available. Restrict access to sensitive files and directories to minimize the risk of exploitation.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2024-07036

CVE-2024-6500

Affected Products

Windows

References · 28

• https://bdu.fstec.ru/vul/2024-07036 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6500 · Security Note
• https://twitter.com/oha000/status/1825348507424960798 · Twitter Post
• https://plugins.trac.wordpress.org/browser/inpost-for-woocommerce/trunk/src/InspireLabs/WoocommerceInpost/EasyPack_Helper.php#L267 · Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3125034%40woo-inpost%2Ftrunk&old=2886304%40woo-inpost%2Ftrunk&sfp_email=&sfph_mail= · Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3115602%40inpost-for-woocommerce%2Ftrunk&old=3110579%40inpost-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail= · Note
• https://twitter.com/CCBalert/status/1826617586743734393 · Twitter Post
• https://t.me/cvedetector/561 · Telegram Post
• https://twitter.com/ohhara_shiojiri/status/1825070328659444218 · Twitter Post
• https://t.me/cvedetector/3377 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/7b57e750-71ec-4c52-999b-6c14a78c3bff?source=cve · Note
• https://twitter.com/defhawk_specter/status/1831195486453219762 · Twitter Post
• https://plugins.trac.wordpress.org/browser/inpost-for-woocommerce/trunk/src/InspireLabs/WoocommerceInpost/EasyPack_Helper.php#L75 · Note
• https://twitter.com/CVEnew/status/1824640904411394220 · Twitter Post
• https://twitter.com/defhawk_specter/status/1826846838198034774 · Twitter Post