Lucene search

WordfenceCVE-2024-7770

HistorySep 10, 2024 - 11:15 a.m.

CVE-2024-7770

2024-09-1011:15:10

CWE-434

Wordfence

web.nvd.nist.gov

bit file manager

wordpress plugin

arbitrary file upload

vulnerability

remote code execution

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

38.6%

JSON

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ‘upload’ function in all versions up to, and including, 6.5.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted upload permissions by an administrator, to upload arbitrary files on the affected site’s server which may make remote code execution possible.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

bitappsfile_managerRange<6.5.6wordpress

VendorProductVersionCPE
bitappsfile_manager*cpe:2.3:a:bitapps:file_manager:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
bitapps	file_manager	*	cpe:2.3:a:bitapps:file_manager::::::wordpress::*

CNA Affected

[
  {
    "vendor": "bitpressadmin",
    "product": "Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "6.5.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

plugins.trac.wordpress.org/browser/file-manager/trunk/backend/app/Http/Controllers/FileManagerController.php#L26

plugins.trac.wordpress.org/browser/file-manager/trunk/libs/elFinder/php/elFinder.class.php#L1210

plugins.trac.wordpress.org/browser/file-manager/trunk/libs/elFinder/php/elFinder.class.php#L3257

plugins.trac.wordpress.org/browser/file-manager/trunk/libs/elFinder/php/elFinderConnector.class.php#L160

plugins.trac.wordpress.org/changeset/3138710/

www.wordfence.com/threat-intel/vulnerabilities/id/9cae7702-e531-45b9-9131-42edbc073a07?source=cve

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

38.6%

JSON

Related for CVE-2024-7770