7.5

CVE-2024-0842

Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service

Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.
Mögliche Gegenmaßnahme
Backuply – Backup, Restore, Migrate and Clone: Update to version 1.2.7, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Softaculous ≫ Backuply SwPlatformwordpress Version < 1.2.6
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Backuply – Backup, Restore, Migrate and Clone
Version *-1.2.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.96% 0.568
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
security@wordfence.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

CWE-834 Excessive Iteration

The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

https://plugins.trac.wordpress.org/changeset/3033242/backuply/trunk/restore_ins.php
Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/1f955d88-ab4c-4cf4-a23b-91119d412716?source=cve
Third Party Advisory
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3036756%40backuply&new=3036756%40backuply&sfp_email=&sfph_mail=
https://www.wordfence.com/threat-intel/vulnerabilities/id/1f955d88-ab4c-4cf4-a23b-91119d412716
Third Party Advisory