4.9

CVE-2021-24549

Exploit

AceIDE <= 2.6.2 - Authenticated (admin+) Arbitrary File Access

AceIDE <= 2.6.2 - Authenticated (Admin+) Arbitrary File Read

The AceIDE WordPress plugin through 2.6.2 does not sanitise or validate the user input which is appended to system paths before using it in various actions, such as to read arbitrary files from the server. This allows high privilege users such as administrator to access any file on the web server outside of the blog directory via a path traversal attack.
Mögliche Gegenmaßnahme
AceIDE: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Aceide Project ≫ Aceide SwPlatformwordpress Version <= 2.6.2
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt AceIDE
Version *-2.6.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.57% 0.722
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.9 1.2 3.6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

https://codevigilant.com/disclosure/2021/wp-plugin-aceide/
Third Party Advisory
Exploit
https://wpscan.com/vulnerability/c594abaf-b152-448c-8a20-9b3267fe547a
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/7fd179ab-f2ab-4ce3-851f-d6da3f0243c6
Third Party Advisory