| Vulnerability Name: | CVE-2019-8943 (CCN-157427) | ||||||||||||||||||||||||||||||||||||
| Assigned: | 2019-02-19 | ||||||||||||||||||||||||||||||||||||
| Published: | 2019-02-19 | ||||||||||||||||||||||||||||||||||||
| Updated: | 2021-02-23 | ||||||||||||||||||||||||||||||||||||
| Summary: | WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring. | ||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) 6.1 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:F/RL:U/RC:R)
5.0 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:F/RL:U/RC:R)
| ||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 4.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N)
| ||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-22 | ||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2019-8943 Source: MISC Type: Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/152396/WordPress-5.0.0-crop-image-Shell-Upload.html Source: MISC Type: Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/161213/WordPress-5.0.0-Remote-Code-Execution.html Source: MISC Type: Exploit, Third Party Advisory http://www.rapid7.com/db/modules/exploit/multi/http/wp_crop_rce Source: BID Type: Third Party Advisory, VDB Entry 107089 Source: CCN Type: RIPSTECH Web site WordPress 5.0.0 Remote Code Execution Source: MISC Type: Exploit, Third Party Advisory https://blog.ripstech.com/2019/wordpress-image-remote-code-execution/ Source: XF Type: UNKNOWN wp-cve20198943-dir-traversal(157427) Source: CCN Type: Packet Storm Security [04-04-2019] WordPress 5.0.0 crop-image Shell Upload Source: CCN Type: Packet Storm Security [02-01-2021] WordPress 5.0.0 Remote Code Execution Source: CCN Type: WordPress Web site WordPress Source: EXPLOIT-DB Type: Exploit, Third Party Advisory, VDB Entry 46511 Source: EXPLOIT-DB Type: EXPLOIT Offensive Security Exploit Database [04-05-2019] Source: EXPLOIT-DB Type: Exploit, Mailing List, Third Party Advisory, VDB Entry 46662 Source: EXPLOIT-DB Type: EXPLOIT Offensive Security Exploit Database [02-01-2021] Source: CCN Type: WhiteSource Vulnerability Database CVE-2019-8943 | ||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||