Sermon Browser <= 0.45.22 - Arbitrary File Upload via CSRF
CVE-2022-0499

8.8HIGH

Key Information:

Vendor
Wordpress
Status
Sermon Browser
Vendor
CVE Published:
28 March 2022

Summary

The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allowing attackers to make a logged in admin upload arbitrary files such as PHP ones.

Affected Version(s)

Sermon Browser 0.45.22

References

https://wpscan.com/vulnerability/e9ccf1fc-1dbf-4a41-bf4a-...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Krishna Harsha Kondaveeti
.