Lucene search

PatchstackCVE-2024-31351

HistoryMay 17, 2024 - 7:16 a.m.

CVE-2024-31351

2024-05-1707:16:01

CWE-434

Patchstack

web.nvd.nist.gov

unrestricted upload

file type

vulnerability

copymatic ai

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.6.

Affected configurations

Vulners

Vulnrichment

Node

copymaticcopymatic_–_ai_content_writer_\&_generatorRange≤1.6wordpress

VendorProductVersionCPE
copymaticcopymatic_–_ai_content_writer_\&_generator*cpe:2.3:a:copymatic:copymatic_–_ai_content_writer_\&_generator:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
copymatic	copymatic_–_ai_content_writer_\&_generator	*	cpe:2.3:a:copymatic:copymatic_–_ai_content_writer_\&_generator::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "copymatic",
    "product": "Copymatic – AI Content Writer & Generator",
    "vendor": "Copymatic",
    "versions": [
      {
        "changes": [
          {
            "at": "1.7",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/copymatic/wordpress-copymatic-plugin-1-6-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-31351