CVE-2024-12008

MEDIUMNuclei

W3 Total Cache <= 2.8.1 Information Exposure via Log Files

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-12008 has a selected CVSS score of 5.3 (medium); EIP currently links 1 repository PoC and 1 Nuclei template.

Description

The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF attacks. Note: the debug feature must be enabled for this to be a concern, and it is disabled by default.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1
Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 14, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

W3 Total Cache

Browse boldgrid / W3 Total Cache

Default status: unaffected

CVE ListThrough 2.8.1affected

Proofs of concept

1

Repository PoCs

GitHubspyata123/CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-CacheRepository PoCby spyata1230Not analyzed2 files

3.7 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMW3 Total Cache < 2.8.2 - Log File ExposureCVSS 5.3

The plugin is vulnerable to Information Exposure through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF attacks.

Impact

Unauthenticated attackers can extract sensitive credentials, leading to potential account compromise and further attacks.

Remediation

Update the W3 Total Cache plugin to version 2.8.2 or later, which restricts access to debug log files. Additionally, disable debug logging in production environments and ensure .htaccess rules block direct access to the cache/log directory.

WeaknessesCWE-532
Authorsritikchaddha
Template tagscvecve2024wordpresswpwp-pluginw3-total-cacheexposurelogs
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Shodan: http.component:"WordPress" http.component:"W3 Total Cache"
FOFA: app="WordPress-W3-Total-Cache"
https://wpscan.com/vulnerability/1685ca58-1622-433b-b561-304cb9d1bc56/ https://www.wordfence.com/threat-intel/vulnerabilities/id/8292f23c-fb17-4082-9788-f643d1bb097e https://nvd.nist.gov/vuln/detail/CVE-2024-12008

Source: ProjectDiscovery

References

4