Lucene search

[email protected]NVD:CVE-2024-43249

HistoryAug 19, 2024 - 6:15 p.m.

CVE-2024-43249

2024-08-1918:15:11

CWE-434

[email protected]

web.nvd.nist.gov

bit apps

bit form pro

command injection

vulnerability

unrestricted upload

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

20.0%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4.

Affected configurations

Nvd

Node

bitappsbit_formRange≤2.6.4prowordpress

VendorProductVersionCPE
bitappsbit_form*cpe:2.3:a:bitapps:bit_form:*:*:*:*:pro:wordpress:*:*

Vendor	Product	Version	CPE
bitapps	bit_form	*	cpe:2.3:a:bitapps:bit_form:::::pro:wordpress::

References

patchstack.com/database/vulnerability/bitformpro/wordpress-bit-form-pro-plugin-2-6-4-authenticated-arbitrary-file-upload-vulnerability?_s_id=cve

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

20.0%

JSON

Related for NVD:CVE-2024-43249

vulnrichment1 cve1 cvelist1 wordfence1