Time-based Blind SQL Injection in Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4
CVE-2021-24295

7.5HIGH

Key Information:

Vendor

Wordpress
Status
Spam Protection, Antispam, Firewall By Cleantalk
Vendor
CVE Published:
17 May 2021

What is CVE-2021-24295?

It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by CleanTalk WordPress Plugin before 5.153.4. The update_log function in lib/Cleantalk/ApbctWP/Firewall/SFW.php included a vulnerable query that could be injected via the User-Agent Header by manipulating the cookies set by the Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.153.4, sending an initial request to obtain a ct_sfw_pass_key cookie and then manually setting a separate ct_sfw_passed cookie and disallowing it from being reset.

Affected Version(s)

Spam protection, AntiSpam, FireWall by CleanTalk 5.153.4

References

https://wpscan.com/vulnerability/152171fc-888c-4275-a118-...
x_refsource_CONFIRM
https://www.wordfence.com/blog/2021/05/sql-injection-vuln...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ramuel Gall
.