CVE-2022-1952 eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload
Unauthenticated attackers can upload arbitrary files via an AJAX action, leading to remote code execution on the WordPress site.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-1952?
CVE-2022-1952 is a critical vulnerability in Unknown Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC, published on 11 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An allowlist of valid file extensions is defined but is not used during the validation steps.
Weakness: CWE-434
Which versions are affected by CVE-2022-1952?
It affects 1 product.
Products include Syntacticsinc Easync.
How do I fix CVE-2022-1952?
No fix has been published for CVE-2022-1952 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-1952 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-1952 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Unknown Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC
Sources
Also known as GHSA-cq3m-ccp4-jccg.