7.2

CVE-2022-3366

Exploit

PublishPress Capabilities <= 2.5.1 - Authenticated (Administrator+) PHP Object Injection

The PublishPress Capabilities WordPress plugin before 2.5.2, PublishPress Capabilities Pro WordPress plugin before 2.5.2 unserializes the content of imported files, which could lead to PHP object injection attacks by administrators, on multisite WordPress configurations. Successful exploitation in this case requires other plugins with a suitable gadget chain to be present on the site.
Mögliche Gegenmaßnahme
PublishPress Capabilities Pro: Update to version 2.5.2, or a newer patched version
PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus: Update to version 2.5.2, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt PublishPress Capabilities Pro
Version *-2.5.1
SystemWordPress Plugin
≫
Produkt PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus
Version *-2.5.1
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Publishpress ≫ Capabilities SwEdition- SwPlatformwordpress Version < 2.5.2
Publishpress ≫ Capabilities SwEditionpro SwPlatformwordpress Version < 2.5.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.86% 0.743
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.