CVE-2021-24236

CRITICALNuclei

Imagements <= 1.2.5 - Unauthenticated Arbitrary File Upload to RCE

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24236 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

Imagements

Browse williewonka / Imagements
CVE List1.2.5 to ≤ 1.2.5affected

Nuclei templates

1
ProjectDiscoveryCRITICALWordPress Imagements <=1.2.5 - Arbitrary File UploadCVSS 9.8

WordPress Imagements plugin through 1.2.5 is susceptible to arbitrary file upload which can lead to remote code execution. The plugin allows images to be uploaded in comments but only checks for the Content-Type in the request to forbid dangerous files. An attacker can upload arbitrary files by using a valid image Content-Type along with a PHP filename and code.

Impact

This vulnerability can lead to remote code execution and compromise the affected WordPress site.

Remediation

Update WordPress Imagements plugin to version 1.2.6 or later to fix the arbitrary file upload vulnerability.

WeaknessesCWE-434
Authorspussycat0x
Template tagscve2021cvewpunauthimagementswpscanfileuploadwordpresswp-pluginintrusiveimagements_projectvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:imagements_project:imagements:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/8f24e74f-60e3-4100-9ab2-ec31b9c9cdea https://wordpress.org/plugins/imagements/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24236 https://nvd.nist.gov/vuln/detail/CVE-2021-24236

Source: ProjectDiscovery

References

2