CVE-2021-24579 Bold Page Builder < 3.1.6 - PHP Object Injection
Unauthenticated attackers can trigger PHP object injection via the AJAX grid action, potentially leading to remote code execution if compatible gadgets exist.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-24579?
CVE-2021-24579 is a high-severity unsafe deserialization vulnerability in Unknown Bold Page Builder, published on 30 Aug 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The bt_bb_get_grid AJAX action of the Bold Page Builder WordPress plugin before 3.1.6 passes user input into the unserialize() function without any validation or sanitisation, which could lead to a PHP Object Injection. Even though the plugin did not contain a suitable gadget to fully exploit the issue, other installed plugins on the blog could allow such issue to be exploited and lead to RCE in some cases.
Weakness: CWE-502
Which versions are affected by CVE-2021-24579?
It affects 1 product.
Products include Bold-Themes Bold Page Builder.
How do I fix CVE-2021-24579?
No fix has been published for CVE-2021-24579 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2021-24579 being exploited?
There is no known exploitation of CVE-2021-24579 in the wild and no public exploit code.
Other vulnerabilities in Unknown Bold Page Builder
- CVE-2019-15821 Missing authorization in n/a
- CVE-2024-53801 WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-47298 WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-47391 WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-30442 WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability
Sources
Also known as GHSA-7m4f-494f-vxhx.