Lucene search

WordfenceCVE-2022-0888

HistoryMar 23, 2022 - 8:15 p.m.

CVE-2022-0888

2022-03-2320:15:10

CWE-434

Wordfence

web.nvd.nist.gov

ninja forms

file uploads

extension

wordpress

plugin

vulnerability

cve-2022-0888

nvd

remote code execution

security

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.013

Percentile

86.4%

JSON

The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/includes/ajax/controllers/uploads.php file which can be bypassed making it possible for unauthenticated attackers to upload malicious files that can be used to obtain remote code execution, in versions up to and including 3.3.0

Affected configurations

Nvd

Vulners

Node

ninjaformsninja_forms_file_uploadsRange≤3.3.0wordpress

VendorProductVersionCPE
ninjaformsninja_forms_file_uploads*cpe:2.3:a:ninjaforms:ninja_forms_file_uploads:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
ninjaforms	ninja_forms_file_uploads	*	cpe:2.3:a:ninjaforms:ninja_forms_file_uploads::::::wordpress::*

CNA Affected

[
  {
    "vendor": "SaturdayDrive",
    "product": "Ninja Forms - File Uploads",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "3.3.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

gist.github.com/Xib3rR4dAr/5f0accbbfdee279c68ed144da9cd8607

www.wordfence.com/threat-intel/vulnerabilities/id/f00eeaef-f277-481f-9e18-bf1ced0015a0?source=cve

www.wordfence.com/vulnerability-advisories/#CVE-2022-0888

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.013

Percentile

86.4%

JSON

Related for CVE-2022-0888