Lucene search

WordfenceCVE-2024-7628

HistoryAug 15, 2024 - 3:15 a.m.

CVE-2024-7628

2024-08-1503:15:05

CWE-288

Wordfence

web.nvd.nist.gov

mstore api

wordpress plugin

authentication bypass

loose comparison

verify_id_token

unauthenticated attackers

administrator access

flutter.io email address

phone number

firebase configuration.

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

27.7%

JSON

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 4.15.2. This is due to the use of loose comparison in the ‘verify_id_token’ function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to an @flutter.io email address or phone number. This also requires firebase to be configured on the website and the user to have set up firebase for their account.

Affected configurations

Vulners

Vulnrichment

Node

inspireuimstore_api_–_create_native_android_\&_ios_apps_on_the_cloudRange≤4.15.2wordpress

VendorProductVersionCPE
inspireuimstore_api_–_create_native_android_\&_ios_apps_on_the_cloud*cpe:2.3:a:inspireui:mstore_api_–_create_native_android_\&_ios_apps_on_the_cloud:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
inspireui	mstore_api_–_create_native_android_\&_ios_apps_on_the_cloud	*	cpe:2.3:a:inspireui:mstore_api_–_create_native_android_\&_ios_apps_on_the_cloud::::::wordpress::*

CNA Affected

[
  {
    "vendor": "inspireui",
    "product": "MStore API – Create Native Android & iOS Apps On The Cloud",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "4.15.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/helpers/firebase-phone-auth-helper.php?rev=3110793#L31

plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/helpers/firebase-phone-auth-helper.php?rev=3110793#L35

plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/helpers/firebase-phone-auth-helper.php?rev=3110793#L5

plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3134553%40mstore-api&new=3134553%40mstore-api&sfp_email=&sfph_mail=

www.wordfence.com/threat-intel/vulnerabilities/id/d174f856-d94a-42ed-b547-67699e175cd8?source=cve

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

27.7%

JSON

Related for CVE-2024-7628