CVE-2022-3911 iubenda < 3.3.3 - Subscriber+ Privileges Escalation to Admin
Authenticated subscribers can escalate privileges to admin due to missing authorization checks in an AJAX action.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-3911?
CVE-2022-3911 is a high-severity missing authorization vulnerability in Unknown iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more, published on 2 Jan 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The iubenda WordPress plugin before 3.3.3 does does not have authorisation and CSRF in an AJAX action, and does not ensure that the options to be updated belong to the plugin as long as they are arrays. As a result, any authenticated users, such as subscriber can grant themselves any privileges, such as edit_plugins etc
Which versions are affected by CVE-2022-3911?
It affects 1 product.
Products include Iubenda Iubenda-Cookie-Law-Solution.
How do I fix CVE-2022-3911?
No fix has been published for CVE-2022-3911 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2022-3911 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-3911 exists.
Other vulnerabilities in Unknown iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
Sources
Also known as GHSA-5rfm-q8cg-pq99.