CVE-2022-0679

CRITICALNuclei

Narnoo Distributor <= 2.5.1 - Unauthenticated LFI to Arbitrary File Read / RCE

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-0679 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the lib_path parameter before it is passed into a call to require() via the narnoo_distributor_lib_request AJAX action (available to both unauthenticated and authenticated users) which results in the disclosure of arbitrary files as the content of the file is then displayed in the response as JSON data. This could also lead to RCE with various tricks but depends on the underlying system and it's configuration.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 3, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

Narnoo Distributor

CVE List2.5.1 to ≤ 2.5.1affected

narnoo_distributor

Browse narnoo_distributor_project / narnoo_distributor
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALWordPress Narnoo Distributor <=2.5.1 - Local File InclusionCVSS 9.8

WordPress Narnoo Distributor plugin 2.5.1 and prior is susceptible to local file inclusion. The plugin does not validate and sanitize the lib_path parameter before being passed into a call to require() via the narnoo_distributor_lib_request AJAX action, and the content of the file is displayed in the response as JSON data. This can also lead to a remote code execution vulnerability depending on system and configuration.

Impact

The vulnerability can lead to unauthorized access to sensitive files, potentially exposing sensitive information or allowing for further exploitation.

Remediation

Update to the latest version of the WordPress Narnoo Distributor plugin (>=2.5.2) to mitigate the LFI vulnerability.

WeaknessesCWE-22
AuthorsVeshraj
Template tagscvecve2022narnoo-distributorwordpresswp-pluginwpscanwprceunauthlfinarnoo_distributor_projectvkev
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:narnoo_distributor_project:narnoo_distributor:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/0ea79eb1-6561-4c21-a20b-a1870863b0a8 https://nvd.nist.gov/vuln/detail/CVE-2022-0679 https://github.com/cyllective/CVEs https://github.com/ARPSyndicate/cvemon https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

2