CVE-2022-2554 Enable Media Replace < 4.0.0 - Admin+ Path Traversal

Q: What is CVE-2022-2554?

CVE-2022-2554 is a medium-severity path traversal vulnerability in Unknown Enable Media Replace, published on 10 Oct 2022. An attacker needs administrator access to exploit it, with no action from the victim.

Q: Is CVE-2022-2554 being exploited?

There is no known exploitation of CVE-2022-2554 in the wild and no public exploit code.

Q: How do I fix CVE-2022-2554?

No fix has been published for CVE-2022-2554 yet. Limit exposure of the affected software until one is available.

Medium 4.9 Published 10 Oct 2022 Updated 3 Aug 2024

Admins can exploit path traversal to move files outside the upload directory, potentially enabling code execution or data modification.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-2554?

CVE-2022-2554 is a medium-severity path traversal vulnerability in Unknown Enable Media Replace, published on 10 Oct 2022. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

The Enable Media Replace WordPress plugin before 4.0.0 does not ensure that renamed files are moved to the Upload folder, which could allow high privilege users such as admin to move them outside to the web root directory via a path traversal attack for example

Weakness: CWE-22

Which versions are affected by CVE-2022-2554?

It affects 1 product.

Products include Shortpixel Enable Media Replace.

How do I fix CVE-2022-2554?

No fix has been published for CVE-2022-2554 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2022-2554 being exploited?

There is no known exploitation of CVE-2022-2554 in the wild and no public exploit code.

Sources

Also known as GHSA-pr9x-p233-rm4x.