CVE-2021-24947

MEDIUMNuclei

RVM - Responsive Vector Maps < 6.4.2 - Subscriber+ Arbitrary File Read

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24947 has a selected CVSS score of 6.5 (medium); EIP currently links 1 Nuclei template.

Description

The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, to read arbitrary files on the web server

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

RVM – Responsive Vector Maps

CVE List6.4.2 to < 6.4.2affected

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Responsive Vector Maps < 6.4.2 - Arbitrary File ReadCVSS 6.5

WordPress Responsive Vector Maps < 6.4.2 contains an arbitrary file read vulnerability because the plugin does not have proper authorization and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user to read arbitrary files on the web server.

Impact

An attacker can read sensitive files on the server, potentially leading to unauthorized access or exposure of sensitive information.

Remediation

Update WordPress Responsive Vector Maps plugin to version 6.4.2 or later to mitigate the vulnerability.

WeaknessesCWE-352CWE-863
Authorscckuailong
Template tagscve2021cveauthenticatedwpscanlfiwpwordpresswp-pluginlfrthinkupthemesvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:thinkupthemes:responsive_vector_maps:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/c6bb12b1-6961-40bd-9110-edfa9ee41a18 https://nvd.nist.gov/vuln/detail/CVE-2021-24947 https://github.com/ARPSyndicate/cvemon https://github.com/ARPSyndicate/kenzer-templates https://github.com/kazet/wpgarlic

Source: ProjectDiscovery

References

2