Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
CVE-2022-0888

9.8CRITICAL

Key Information:

Vendor
Wordpress
Status
Ninja Forms - File Uploads
Vendor
CVE Published:
23 March 2022

Summary

The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/includes/ajax/controllers/uploads.php file which can be bypassed making it possible for unauthenticated attackers to upload malicious files that can be used to obtain remote code execution, in versions up to and including 3.3.0

Affected Version(s)

Ninja Forms - File Uploads 3.3.0

References

https://gist.github.com/Xib3rR4dAr/5f0accbbfdee279c68ed14...
x_refsource_MISC
https://www.wordfence.com/vulnerability-advisories/#CVE-2...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammad Zeeshan (Xib3rR4dAr)
.