CVE-2021-24236 Imagements <= 1.2.5 - Unauthenticated Arbitrary File Upload to RCE
Unauthenticated attackers can upload arbitrary PHP files by spoofing Content-Type headers, leading to remote code execution on the WordPress site.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-24236?
CVE-2021-24236 is a critical vulnerability in williewonka Imagements, published on 5 May 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE.
Weakness: CWE-434
Which versions are affected by CVE-2021-24236?
It affects 1 product.
Products include Imagements Project Imagements.
How do I fix CVE-2021-24236?
No fix has been published for CVE-2021-24236 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-24236 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-24236 exists.
Public exploit code: 1 Nuclei template.
Sources
Also known as GHSA-vvjm-6792-4mj3.