CVE-2024-6392

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized plugin settings modification due to missing capability checks on the plugin functions in all versions up to, and including, 7.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the connected Sirv account to an attacker-controlled one.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://plugins.trac.wordpress.org/browser/sirv/tags/7.2.6/sirv.php#L5197	Patch
https://plugins.trac.wordpress.org/browser/sirv/tags/7.2.6/sirv.php#L5338	Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/229490c3-d820-4831-b105-a429512c2c60?source=cve	Third Party Advisory
https://plugins.trac.wordpress.org/browser/sirv/tags/7.2.6/sirv.php#L5197	Patch
https://plugins.trac.wordpress.org/browser/sirv/tags/7.2.6/sirv.php#L5338	Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/229490c3-d820-4831-b105-a429512c2c60?source=cve	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:sirv:sirv:*:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2024-07-11 22:15

Updated : 2024-11-21 09:49

NVD link : CVE-2024-6392

Mitre link : CVE-2024-6392

CVE.ORG link : CVE-2024-6392

JSON object : View

Products Affected

sirv

sirv

CWE

CWE-862

Missing Authorization

{"id": "CVE-2024-6392", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}]}, "published": "2024-07-11T22:15:02.820", "references": [{"url": "https://plugins.trac.wordpress.org/browser/sirv/tags/7.2.6/sirv.php#L5197", "tags": ["Patch"], "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/browser/sirv/tags/7.2.6/sirv.php#L5338", "tags": ["Patch"], "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/229490c3-d820-4831-b105-a429512c2c60?source=cve", "tags": ["Third Party Advisory"], "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/browser/sirv/tags/7.2.6/sirv.php#L5197", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://plugins.trac.wordpress.org/browser/sirv/tags/7.2.6/sirv.php#L5338", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/229490c3-d820-4831-b105-a429512c2c60?source=cve", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "The Image Optimizer, Resizer and CDN \u2013 Sirv plugin for WordPress is vulnerable to unauthorized plugin settings modification due to missing capability checks on the plugin functions in all versions up to, and including, 7.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the connected Sirv account to an attacker-controlled one."}, {"lang": "es", "value": "El complemento Image Optimizer, Resizer y CDN \u2013 Sirv para WordPress es vulnerable a modificaciones no autorizadas de la configuraci\u00f3n del complemento debido a la falta de comprobaciones de capacidad en las funciones del complemento en todas las versiones hasta la 7.2.7 incluida. Esto hace posible que los atacantes autenticados, con acceso de nivel de suscriptor y superior, cambien la cuenta Sirv conectada a una controlada por el atacante."}], "lastModified": "2024-11-21T09:49:33.967", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sirv:sirv:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "479CF10B-EE73-452F-BA16-3E26143812EE", "versionEndExcluding": "7.2.8"}], "operator": "OR"}]}], "sourceIdentifier": "security@wordfence.com"}