by Kastro
Paper/Archive/CVE-2021-24223

CVE-2021-24223

Unknown N5 Upload Form — N5 Upload Form <= 1.0 - Unauthenticated Arbitrary File Upload to RCE

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 82.6.826 × 2016.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5(uniqid(rand())), however, in the case of misconfigured servers with Directory listing enabled, accessing it is trivial.

Affected

ProductAffectedFixed inSource
N5 Upload Form1.0 – 1.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refwpscan.com/vulnerability/d7a72183-0cd1-45de-b98b-2e295b27e5dbrefgithub.com/jinhuang1102/CVE-ID-Reports/blob/12863f80ced5361e2e2c3f7209566ab3730aa37b/N5_upload.md