6.8
CVE-2021-24490
- EPSS 0.54%
- Veröffentlicht 13.09.2021 18:15:14
- Zuletzt bearbeitet 21.11.2024 05:53:10
- Quelle contact@wpscan.com
- CVE-Watchlists
- Unerledigt
LoginEmail Artillery <= 4.1 - Arbitrary File Upload
Email Artillery (MASS EMAIL) <= 4.1 - Arbitrary File Upload
The Email Artillery (MASS EMAIL) WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well. However, due to the presence of a .htaccess, denying access to everything in the folder the file is uploaded to, the malicious uploaded file will only be accessible on Web Servers such as Nginx/IIS
Mögliche Gegenmaßnahme
Email Artillery (MASS EMAIL): No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Email Artillery Project ≫ Email Artillery SwPlatformwordpress Version <= 4.1
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
Email Artillery (MASS EMAIL)
Version
*-4.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.54% | 0.411 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 0.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6 | 6.8 | 6.4 |
AV:N/AC:M/Au:S/C:P/I:P/A:P
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
https://wpscan.com/vulnerability/4ea0127e-afef-41bf-a005-c57432f9f58c
https://www.wordfence.com/threat-intel/vulnerabilities/id/1cbb309c-015b-4bdb-917a-a67e028484e6