CVE-2021-24154 Theme Editor < 2.6 - Authenticated Arbitrary File Download
Authenticated administrators can download arbitrary files from the web server due to lack of validation in the Theme Editor plugin.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-24154?
CVE-2021-24154 is a medium-severity path traversal vulnerability in Unknown Theme Editor, published on 5 Apr 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the download_file() function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd
Weakness: CWE-552
Which versions are affected by CVE-2021-24154?
It affects 1 product.
Products include Themeeditor Theme Editor.
How do I fix CVE-2021-24154?
No fix has been published for CVE-2021-24154 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2021-24154 being exploited?
There is no known exploitation of CVE-2021-24154 in the wild and no public exploit code.
Other vulnerabilities in Unknown Theme Editor
Sources
Also known as GHSA-4cqh-mqrw-7qqg.