by Kastro
Paper/Archive/CVE-2020-36718

CVE-2020-36718

ninjateam GDPR CCPA Compliance & Cookie Consent Banner — GDPR CCPA Compliance Support <= 2.3 - PHP Object Injection

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 77.5.775 × 2015.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The GDPR CCPA Compliance Support plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.3 via deserialization of untrusted input "njt_gdpr_allow_permissions" value. This allows unauthenticated attackers to inject a PHP Object.

Affected

ProductAffectedFixed inSource
GDPR CCPA Compliance & Cookie Consent Banner≤ 2.3–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/a2871261-3231-4a52-9a38-bb3caf461e7d?source=cverefplugins.trac.wordpress.org/changeset/2408938refplugins.trac.wordpress.org/changeset/2411356/ninja-gdpr-compliancerefblog.nintechnet.com/gdpr-ccpa-compliance-support-plugin-fixed-insecure-deserialization-vulnerabilityrefwordpress.org/plugins/ninja-gdpr-compliance/#developersrefwpscan.com/vulnerability/92f1d6fb-c665-419e-a13b-688b1df6c395