CVE-2022-1777

🗓️ 13 Jun 2022 12:42:48Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 103 Views🌐 WEB

The Filr WordPress plugin before 1.2.2.1 allows authenticated users to perform unauthorized actions via leaked nonce

Reporter	Title	Published	Views	Family All 15
attackerkb	CVE-2022-1777	13 Jun 202213:15	–	attackerkb
Circl	CVE-2022-1777	13 Jun 202216:17	–	circl
CNNVD	WordPress plugin Filr 安全漏洞	13 Jun 202200:00	–	cnnvd
CNVD	WordPress Filr plugin authorization issue vulnerability	15 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-1777 Filr - Secure Document Library < 1.2.2.1 - Subscriber+ AJAX Calls	13 Jun 202212:42	–	cvelist
EUVD	EUVD-2022-25058	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1777	13 Jun 202213:15	–	nvd
OSV	CVE-2022-1777	13 Jun 202213:15	–	osv
Patchstack	WordPress Filr Secure Document Library plugin <= 1.2.2 - Subscriber+ AJAX Calls vulnerability	23 May 202200:00	–	patchstack
Prion	Code injection	13 Jun 202213:15	–	prion

NVD

Node

filr_project filrRange<1.2.2.1wordpress

[
  {
    "product": "Filr – Secure document library",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.2.2.1",
        "status": "affected",
        "version": "1.2.2.1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/a50dc7f8-a9e6-41fa-a047-ad1c3bc309b4

Parameter	Position	Path	Description	CWE
action	request body	wp-admin/admin-ajax.php	AJAX upload_file action lacks proper authorization checks, allowing any authenticated user (e.g., subscriber) to upload arbitrary HTML files due to a leaked nonce.	CWE-862
nonce	request body	wp-admin/admin-ajax.php	AJAX upload_file action lacks proper authorization checks, allowing any authenticated user (e.g., subscriber) to upload arbitrary HTML files due to a leaked nonce.	CWE-862
post_id	request body	wp-admin/admin-ajax.php	AJAX upload_file action lacks proper authorization checks, allowing any authenticated user (e.g., subscriber) to upload arbitrary HTML files due to a leaked nonce.	CWE-862
file-upload	request body	wp-admin/admin-ajax.php	AJAX upload_file action lacks proper authorization checks, allowing any authenticated user (e.g., subscriber) to upload arbitrary HTML files due to a leaked nonce.	CWE-862
action	request body	wp-admin/admin-ajax.php	AJAX delete_file action lacks proper authorization checks, enabling deletion of arbitrary files by any authenticated user using the filename parameter.	CWE-862
nonce	request body	wp-admin/admin-ajax.php	AJAX delete_file action lacks proper authorization checks, enabling deletion of arbitrary files by any authenticated user using the filename parameter.	CWE-862
post_id	request body	wp-admin/admin-ajax.php	AJAX delete_file action lacks proper authorization checks, enabling deletion of arbitrary files by any authenticated user using the filename parameter.	CWE-862
filename	request body	wp-admin/admin-ajax.php	AJAX delete_file action lacks proper authorization checks, enabling deletion of arbitrary files by any authenticated user using the filename parameter.	CWE-862