CVE-2021-24970 All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion
An attacker with admin privileges can exploit a local file inclusion vulnerability in the All-in-One Video Gallery plugin to read arbitrary files or execute code.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-24970?
CVE-2021-24970 is a high-severity path traversal vulnerability in Unknown All-in-One Video Gallery, published on 13 Dec 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue
Weakness: CWE-22
Which versions are affected by CVE-2021-24970?
It affects 1 product.
Products include Plugins360 All-in-One Video Gallery.
How do I fix CVE-2021-24970?
No fix has been published for CVE-2021-24970 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2021-24970 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-24970 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Unknown All-in-One Video Gallery
- CVE-2022-2633 Server-side request forgery in All-in-One Video Gallery
- CVE-2024-6629 All-in-One Video Gallery <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode
- CVE-2024-31248 WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability
Sources
Also known as GHSA-c9pf-3r6r-m8r5.