CVE-2019-25213 Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read

What is CVE-2019-25213?

CVE-2019-25213 is a critical path traversal vulnerability in vasyltech Advanced Access Manager – Access Governance for WordPress, published on 16 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive files such as wp-config.php

Weakness: CWE-22

Which versions are affected by CVE-2019-25213?

It affects 1 product.

Products include Vasyltech Advanced Access Manager.

How do I fix CVE-2019-25213?

No fix has been published for CVE-2019-25213 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2019-25213 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-25213 exists.

Public exploit code: 1 Nuclei template.

Other vulnerabilities in vasyltech Advanced Access Manager – Access Governance for WordPress

• CVE-2020-35935 Privilege escalation in n/a High 7.5
• CVE-2014-6059 File upload in n/a High 7.2
• CVE-2024-29127 WordPress Advanced Access Manager plugin <= 6.9.20 - Reflected Cross Site Scripting (XSS) vulnerability High 7.1
• CVE-2023-51674 WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS) Medium 6.5
• CVE-2023-50881 WordPress Advanced Access Manager Plugin <= 6.9.15 is vulnerable to Cross Site Scripting (XSS) Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wx98-rpcr-jrwv.