CVE-2024-10586

Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation

CVSS 9.8 CRITICALEPSS 2.1%CWE-862

Vexday Risk Score

48Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS 9.8EPSS 2.1%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Ciclo de vida

09 nov 2024Publicada en NVD

10 nov 2024PoC pública

Recomendación: Planificar corrección próxima — ya existe PoC pública.

The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution. CVE-2024-52416 may be a duplicate of this issue.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

eugenbobrowski · Debug Tool

PoCs públicas encontradas — 2

githubgithub.com/RandomRobbieBF/CVE-2024-10586★ 1 githubgithub.com/Nxploited/CVE-2024-10586-Poc★ 0

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://plugins.trac.wordpress.org/browser/debug-tool/trunk/tools/image-puller.php#L120 https://www.wordfence.com/threat-intel/vulnerabilities/id/5e9d5c93-dcd7-450e-8c52-5c95fc5473d2?source=cve