String Locator < 2.5.0 - Admin+ Arbitrary File Read
CVE-2022-0493

4.9MEDIUM

Key Information:

Vendor
Wordpress
Status
String Locator
Vendor
CVE Published:
28 March 2022

Summary

The String locator WordPress plugin before 2.5.0 does not properly validate the path of the files to be searched, allowing high privilege users such as admin to query arbitrary files on the web server via a path traversal vector. Furthermore, due to a flaw in the search, allowing a pattern to be provided, which will be used to output the relevant matches from the matching file, all content of the file can be disclosed.

Affected Version(s)

String locator 2.5.0

References

https://wpscan.com/vulnerability/21e2e5fc-03d2-4791-beef-...
x_refsource_MISC
https://plugins.trac.wordpress.org/changeset/2685592
x_refsource_CONFIRM

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

qerogram
.