Paper/Archive/CVE-2024-8856

CVE-2024-8856

revmakx Backup and Staging by WP Time Capsule — Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload

EPSS 94%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 99.8.998 × 2020.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the the UploadHandler.php file and no direct file access prevention in all versions up to, and including, 1.22.21. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

Affected

ProductAffectedFixed inSource

Backup and Staging by WP Time Capsule≤ 1.22.21–CNA

backup_and_staging_by_wp_time_capsule≤ 1.22.21–CISA-ADP

Scores by source

Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/fdc2de78-5601-461f-b2f0-c80b592ccb1b?source=cve refplugins.trac.wordpress.org/browser/wp-time-capsule/trunk/wp-tcapsule-bridge/upload/php/UploadHandler.php refplugins.trac.wordpress.org/changeset/3188325 refplugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3153289%40wp-time-capsule&new=3153289%40wp-time-capsule&sfp_email=&sfph_mail=refhacked.be/posts/CVE-2024-8856