Paper/Archive/CVE-2024-10586

CVE-2024-10586

eugenbobrowski Debug Tool — Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 82.1.821 × 2016.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution. CVE-2024-52416 may be a duplicate of this issue.

Affected

ProductAffectedFixed inSource

Debug Tool≤ 2.2–CNA

debug_tool≤ 2.2–CISA-ADP

Scores by source

Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/5e9d5c93-dcd7-450e-8c52-5c95fc5473d2?source=cve refplugins.trac.wordpress.org/browser/debug-tool/trunk/tools/image-puller.php#L120