CVE-2022-2638 Export All URLs < 4.4 - Admin+ Arbitrary System File Removal
High-privilege users can delete arbitrary system files due to lack of path validation in the Export All URLs plugin.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-2638?
CVE-2022-2638 is a medium-severity path traversal vulnerability in Unknown Export All URLs, published on 29 Aug 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server
Which versions are affected by CVE-2022-2638?
It affects 1 product.
Products include Atlasgondal Export All Urls.
How do I fix CVE-2022-2638?
No fix has been published for CVE-2022-2638 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2022-2638 being exploited?
There is no known exploitation of CVE-2022-2638 in the wild and no public exploit code.
Other vulnerabilities in Unknown Export All URLs
- CVE-2022-0914 Export All URLs < 4.3 - Private/Draft Post/Page Title Disclosure via CSRF
- CVE-2023-3118 Export All URLs < 4.6 - Reflected XSS
- CVE-2022-0892 Export All URLs < 4.2 - Reflected Cross-Site Scripting
- CVE-2023-51510 WordPress Export Media URLs plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2022-27856 WordPress Export All URLs Plugin <= 4.1 is vulnerable to Cross Site Scripting (XSS)
Sources
Also known as GHSA-448f-ww7h-5m58.