CVE-2021-24490 Email Artillery <= 4.1 - Arbitrary File Upload
Attackers can upload arbitrary files via the Import Emails feature, potentially leading to code execution on Nginx or IIS servers.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-24490?
CVE-2021-24490 is a medium-severity vulnerability in Unknown Email Artillery (MASS EMAIL), published on 13 Sep 2021. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
The Email Artillery (MASS EMAIL) WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well. However, due to the presence of a .htaccess, denying access to everything in the folder the file is uploaded to, the malicious uploaded file will only be accessible on Web Servers such as Nginx/IIS
Which versions are affected by CVE-2021-24490?
It affects 1 product.
Products include Email Artillery Project Email Artillery.
How do I fix CVE-2021-24490?
No fix has been published for CVE-2021-24490 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-24490 being exploited?
There is no known exploitation of CVE-2021-24490 in the wild and no public exploit code.
Sources
Also known as GHSA-573h-c24j-7p83.