Paper/Archive/CVE-2024-5853

CVE-2024-5853

sirv Image Optimizer, Resizer and CDN – Sirv — Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload

EPSS 0.8%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 56.2.562 × 2011.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sirv_upload_file_by_chanks AJAX action in all versions up to, and including, 7.2.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

Affected

ProductAffectedFixed inSource

Image Optimizer, Resizer and CDN – Sirv≤ 7.2.6–CNA

image_optimizer\,_resizer_and_cdn≤ 7.2.6–CISA-ADP

Scores by source

Wordfence (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/e89b40ec-1952-46e3-a91b-bd38e62f8929?source=cve refplugins.trac.wordpress.org/changeset/3103410/sirv/trunk/sirv.php