Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-32623: WordPress Plugin "Snow Monkey Forms" vulnerable to directory traversal

Directory traversal vulnerability in Snow Monkey Forms versions v5.1.0 and earlier allows a remote unauthenticated attacker to delete arbitrary files on the server.

CVE
#vulnerability#web#wordpress#auth

Published:2023/06/27 Last Updated:2023/06/27

Overview

WordPress Plugin “Snow Monkey Forms” provided by Monkey Wrench Inc. contains a directory traversal vulnerability.

Products Affected

  • Snow Monkey Forms versions v5.1.0 and earlier

Description

WordPress Plugin “Snow Monkey Forms” provided by Monkey Wrench Inc. contains a directory traversal vulnerability (CWE-22).

Impact

Arbitrary files on the server may be deleted by a remote attacker.

Solution

Update the plugin
Update the plugin according to the information provided by the developer.

Vendor Status

References

JPCERT/CC Addendum

Vulnerability Analysis by JPCERT/CC

CVSS v3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Attack Vector(AV)

Physical §

Local (L)

Adjacent (A)

Network (N)

Attack Complexity(AC)

High (H)

Low (L)

Privileges Required(PR)

High (H)

Low (L)

None (N)

User Interaction(UI)

Required ®

None (N)

Scope(S)

Unchanged (U)

Changed ©

Confidentiality Impact©

None (N)

Low (L)

High (H)

Integrity Impact(I)

None (N)

Low (L)

High (H)

Availability Impact(A)

None (N)

Low (L)

High (H)

CVSS v2 AV:N/AC:L/Au:N/C:N/I:P/A:N

Access Vector(AV)

Local (L)

Adjacent Network (A)

Network (N)

Access Complexity(AC)

High (H)

Medium (M)

Low (L)

Authentication(Au)

Multiple (M)

Single (S)

None (N)

Confidentiality Impact©

None (N)

Partial §

Complete ©

Integrity Impact(I)

None (N)

Partial §

Complete ©

Availability Impact(A)

None (N)

Partial §

Complete ©

Comment

This analysis assumes that an attacker removes a file outside the web contents area.

Credit

Shinsaku Nomura of Bitforest Co.,Ltd. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Other Information

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda