CVE-2022-1657 JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion
Authenticated users can exploit path traversal to include arbitrary local files, potentially leading to code execution in Jupiter and JupiterX WordPress themes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-1657?
CVE-2022-1657 is a high-severity path traversal vulnerability in ArtBees Jupiter, published on 13 Jun 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File inclusion. In the JupiterX theme, the jupiterx_cp_load_pane_action AJAX action present in the lib/admin/control-panel/control-panel.php file calls the load_control_panel_pane function. It is possible to use this action to include any local PHP file via the slug parameter. The Jupiter theme has a nearly identical vulnerability which can be exploited via the mka_cp_load_pane_action AJAX action present in the framework/admin/control-panel/logic/functions.php file, which calls the mka_cp_load_pane_action function.
Weakness: CWE-22
Which versions are affected by CVE-2022-1657?
It affects 2 products.
Products include Artbees Jupiter, Artbees Jupiterx.
How do I fix CVE-2022-1657?
No fix has been published for CVE-2022-1657 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2022-1657 being exploited?
There is no known exploitation of CVE-2022-1657 in the wild and no public exploit code.
Other vulnerabilities in ArtBees Jupiter
Sources
Also known as GHSA-q239-6x89-792c.