ithemes.comVendor advisory
https://ithemes.com/blog/wordpress-vulnerability-report-special-edition-september-6-2022-backupbuddy CVE-2022-31474
HIGHNuclei
WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal
Record summary
CVE-2022-31474 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from 8.5.8.0 through 8.7.4.1.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Jan 12, 2023 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Available material
- Nuclei templates
- 1
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 8, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
BackupBuddyBrowse iThemes / BackupBuddyDefault status: unaffected | CVE List, VulnCheck | 8.5.8.0 to ≤ 8.7.4.1 | affected |
Nuclei templates
1ProjectDiscoveryHIGHBackupBuddy - Local File InclusionCVSS 7.5
BackupBuddy versions 8.5.8.0 - 8.7.4.1 are vulnerable to a local file inclusion vulnerability via the 'download' and 'local-destination-id' parameters.
Impact
An attacker can exploit this vulnerability to gain unauthorized access to sensitive information stored on the server.
Remediation
Upgrade to at least version 8.7.5 or higher
WeaknessesCWE-22
Authorsaringo
Template tagscvecve2022wordpresswp-pluginwplfibackupbuddyithemesvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:ithemes:backupbuddy:*:*:*:*:*:wordpress:*:*
https://www.wordfence.com/blog/2022/09/psa-nearly-5-million-attacks-blocked-targeting-0-day-in-backupbuddy-plugin/ https://ithemes.com/blog/wordpress-vulnerability-report-special-edition-september-6-2022-backupbuddy https://ithemes.com/backupbuddy/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31474 https://ithemes.com/blog/wordpress-vulnerability-report-special-edition-september-6-2022-backupbuddy/
Source: ProjectDiscovery
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-31474 patchstack.comvdb entry
https://patchstack.com/database/vulnerability/backupbuddy/wordpress-backup-buddy-plugin-8-5-8-0-8-7-4-1-unauthenticated-path-traversal-arbitrary-file-download-vulnerability?_s_id=cve