CVE-2021-38314

🗓️ 02 Sep 2021 16:53:54Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 263 Views🌐 WEB

The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress allows unauthenticated users to access sensitive information via unique but predictable AJAX actions

Reporter	Title	Published	Views	Family All 24
GithubExploit	Exploit for Use of a One-Way Hash with a Predictable Salt in Redux Gutenberg_Template_Library_\&_Redux_Framework	26 Jun 202217:23	–	githubexploit
GithubExploit	Exploit for Use of a One-Way Hash with a Predictable Salt in Redux Gutenberg_Template_Library_\&_Redux_Framework	15 May 202202:10	–	githubexploit
GithubExploit	Exploit for Use of a One-Way Hash with a Predictable Salt in Redux Gutenberg_Template_Library_\&_Redux_Framework	7 Dec 202115:39	–	githubexploit
GithubExploit	Exploit for Use of a One-Way Hash with a Predictable Salt in Redux Gutenberg_Template_Library_\&_Redux_Framework	8 Sep 202209:08	–	githubexploit
Circl	CVE-2021-38314	4 Dec 202117:11	–	circl
CNNVD	WordPress 插件安全漏洞	2 Sep 202100:00	–	cnnvd
Cvelist	CVE-2021-38314 Gutenberg Template Library & Redux Framework <= 4.2.11 Sensitive Information Disclosure	2 Sep 202116:53	–	cvelist
Hacker One	MTN Group: CVE-2021-38314 @ https://www.mtn.ci	26 Sep 202109:09	–	hackerone
Hacker One	MTN Group: CVE-2021-38314 @ https://www.mtn.co.rw	26 Sep 202109:17	–	hackerone
Hacker One	Mars: Unauthenticated Sensitive Information Disclosure on █████████ CVE-2021-38314	18 Jan 202215:07	–	hackerone

NVD

Vulners

Node

redux gutenberg_template_library_&_redux_frameworkRange≤4.2.11wordpress

[
  {
    "product": "Gutenberg Template Library & Redux Framework",
    "vendor": "Redux.io",
    "versions": [
      {
        "lessThanOrEqual": "4.2.11",
        "status": "affected",
        "version": "4.2.11",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/blog/2021/09/over-1-million-sites-affected-by-redux-framework-vulnerabilities/

Parameter	Position	Path	Description	CWE
action	query param	wordpress.com/wp-admin/admin-ajax.php	Unauthenticated MD5-based action retrieval exposing plugins list, PHP version, and AUTH_KEY+SECURE_AUTH_KEY hash	CWE-200, CWE-760, CWE-916
action	query param	wordpress.com/wp-admin/admin-ajax.php	POST to trigger settings changes via MD5-based action, enabling modification of plugin settings (e.g., logging)	CWE-200, CWE-760, CWE-916
redux_framework_disable_tracking	query param	wordpress.com/wp-admin/admin-ajax.php	POST to trigger settings changes via MD5-based action, enabling modification of plugin settings (e.g., logging)	CWE-200, CWE-760, CWE-916

21 Nov 2024 06:16Current

5.2Medium risk

Vulners AI Score5.2

CVSS 25

CVSS 3.15.3

EPSS0.84076

SSVC

cve-2021-38314 gutenberg template library redux framework wordpress security vulnerability ajax actions unauthenticated access information disclosure nvd