Lucene search
PRIOn knowledge basePRION:CVE-2023-2996HistoryJun 27, 2023 - 2:15 p.m.
Deserialization of untrusted data
2023-06-2714:15:00
PRIOn knowledge base
www.prio-n.com
6
jetpack plugin
wordpress
file validation
author role
remote code execution
phar deserialization
The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization.
Related
nvd
nvd
CVE-2023-2996
2023-06-27 14:15:11
cve
cve
CVE-2023-2996
2023-06-27 14:15:11
osv
osv
CVE-2023-2996
2023-06-27 14:15:11
openvas
openvas
wpvulndb
wpvulndb
Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API
2023-05-30 00:00:00
wpexploit
wpexploit
Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API
2023-05-30 00:00:00
cvelist
cvelist
CVE-2023-2996 Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API
2023-06-27 13:17:07
wordfence
wordfence