CVE-2021-24226

HIGHNuclei

AccessAlly < 3.5.7 - $_SERVER Superglobal Leakage

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24226 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

In the AccessAlly WordPress plugin before 3.5.7, the file "resource/frontend/product/product-shortcode.php" responsible for the [accessally_order_form] shortcode is dumping serialize($_SERVER), which contains all environment variables. The leakage occurs on all public facing pages containing the [accessally_order_form] shortcode, no login or administrator role is required.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

AccessAlly

CVE List3.5.6 to < 3.5.6*affected
3.5.7 to < 3.5.7affected

Nuclei templates

1
ProjectDiscoveryHIGHAccessAlly <3.5.7 - Sensitive Information LeakageCVSS 7.5

WordPress AccessAlly plugin before 3.5.7 allows sensitive information leakage because the file \"resource/frontend/product/product-shortcode.php\" (which is responsible for the [accessally_order_form] shortcode) dumps serialize($_SERVER), which contains all environment variables. The leakage occurs on all public facing pages containing the [accessally_order_form] shortcode, and no login or administrator role is required.

Impact

An attacker can exploit this vulnerability to gain access to sensitive information.

Remediation

Upgrade AccessAlly to version 3.5.7 or higher to fix the vulnerability.

WeaknessesCWE-200
AuthorsdhiyaneshDK
Template tagscve2021cvewordpresswp-pluginwpscanaccessallyvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:accessally:accessally:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/8e3e89fd-e380-4108-be23-00e87fbaad16 https://nvd.nist.gov/vuln/detail/CVE-2021-24226 https://github.com/ARPSyndicate/kenzer-templates https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

2