8.8

CVE-2021-4330

Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload

The Envato Elements & Download and Template Kit – Import plugins for WordPress are vulnerable to arbitrary file uploads due to insufficient validation of file type upon extracting uploaded Zip files in the installFreeTemplateKit and uploadTemplateKitZipFile functions. This makes it possible for attackers with contributor-lever permissions and above to upload arbitrary files and potentially gain remote code execution in versions up to and including 1.0.13 of Template Kit – Import and versions up to and including 2.0.10 of Envato Elements & Download.
Mögliche Gegenmaßnahme
Envato Elements – Photos & Elementor Templates: Update to version 2.0.11, or a newer patched version
Template Kit – Import: Update to version 1.0.14, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Envato Elements – Photos & Elementor Templates
Version *-2.0.10
SystemWordPress Plugin
≫
Produkt Template Kit – Import
Version *-1.0.13
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Envato ≫ Envato Elements SwPlatformwordpress Version <= 2.0.10
Envato ≫ Template Kit - Import SwPlatformwordpress Version <= 1.0.13
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.54% 0.9
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
security@wordfence.com 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.