Lucene search

WordfenceCVE-2024-3242

HistoryJul 18, 2024 - 9:15 a.m.

CVE-2024-3242

2024-07-1809:15:02

CWE-434

Wordfence

web.nvd.nist.gov

cve-2024-3242

brizy page builder

authenticated

arbitrary file upload

wordpress

file upload vulnerability

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

29.9%

JSON

The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the validateImageContent function called via storeImages in all versions up to, and including, 2.4.43. This makes it possible for authenticated attackers, with contributor access and above, to upload arbitrary files on the affected site’s server which may make remote code execution possible. Version 2.4.44 prevents the upload of files ending in .sh and .php. Version 2.4.45 fully patches the issue.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

brizybrizy-page_builderRange<2.4.45wordpress

VendorProductVersionCPE
brizybrizy-page_builder*cpe:2.3:a:brizy:brizy-page_builder:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
brizy	brizy-page_builder	*	cpe:2.3:a:brizy:brizy-page_builder::::::wordpress::*

CNA Affected

[
  {
    "vendor": "themefusecom",
    "product": "Brizy – Page Builder",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.4.44",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

plugins.trac.wordpress.org/browser/brizy/trunk/editor/zip/archiver.php#L264

plugins.trac.wordpress.org/browser/brizy/trunk/editor/zip/archiver.php#L547

plugins.trac.wordpress.org/changeset/3086506/brizy/trunk/editor/zip/archiver.php

plugins.trac.wordpress.org/changeset/3112878/brizy/trunk?contextall=1&old=3086506&old_path=%2Fbrizy%2Ftrunk

www.wordfence.com/threat-intel/vulnerabilities/id/a414de0a-ae44-4955-bd25-ec6ad7860835?source=cve

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

29.9%

JSON

Related for CVE-2024-3242