7.5

CVE-2017-11658

Exploit

WP Rocket <= 2.10.3 - Local File Inclusion

In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack.
Mögliche Gegenmaßnahme
WP Rocket: Update to version 2.10.4, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wp-rocket ≫ Wp-rocket Version 1.3.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 1.3.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 1.3.2 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 1.3.3 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 1.3.4 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 1.3.5 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 1.3.6 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 1.3.7 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.0.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.0.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.0.2 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.0.3 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.0.4 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.0.5 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.1.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.1.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.2.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.2.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.2.2 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.2.3 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.2 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.3 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.4 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.5 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.6 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.7 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.8 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.9 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.10 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.3.11 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.4.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.4.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.4.2 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.2 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.3 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.4 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.5 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.6 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.7 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.8 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.9 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.10 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.11 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.5.12 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.1.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.2 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.3 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.4 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.5 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.6 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.7 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.8 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.9 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.10 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.11 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.12 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.13 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.14 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.15 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.6.16 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.7.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.7.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.7.2 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.7.3 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.7.4 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.2 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.3 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.4 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.5 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.6 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.7 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.8 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.9 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.10 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.11 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.12 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.13 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.14 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.15 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.16 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.17 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.18 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.19 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.20 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.21 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.8.23 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.2 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.3 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.4 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.5 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.6 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.7 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.8 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.8.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.9 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.10 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.9.11 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.10.0 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.10.1 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.10.2 SwPlatform wordpress
Wp-rocket ≫ Wp-rocket Version 2.10.3 SwPlatform wordpress
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt WP Rocket
Version [*, 2.10.4)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.33% 0.87
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

https://gist.github.com/Shinkurt/157dbb3767c9489f3d754f79b183a890
Third Party Advisory
Exploit
https://wp-rocket.me/changelog
Vendor Advisory
Release Notes
https://wpvulndb.com/vulnerabilities/8872
Third Party Advisory
VDB Entry
https://www.wordfence.com/threat-intel/vulnerabilities/id/9167e4bd-74be-46c9-b06e-566c13c02c7d
Third Party Advisory