CVE-2023-3154 NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization

Q: What is CVE-2023-3154?

CVE-2023-3154 is a high-severity unsafe deserialization vulnerability in Unknown WordPress Gallery Plugin, published on 16 Oct 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Q: Is CVE-2023-3154 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-3154 exists.

Q: How do I fix CVE-2023-3154?

No fix has been published for CVE-2023-3154 yet. Limit exposure of the affected software until one is available.

High 7.5 Published 16 Oct 2023 Updated 16 Sep 2024

An admin-level attacker can exploit PHAR deserialization in NextGEN Gallery to access arbitrary server resources or execute code.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-3154?

CVE-2023-3154 is a high-severity unsafe deserialization vulnerability in Unknown WordPress Gallery Plugin, published on 16 Oct 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input parameter validation in the `gallery_edit` function, allowing an attacker to access arbitrary resources on the server.

Which versions are affected by CVE-2023-3154?

It affects 1 product.

Products include Imagely Nextgen Gallery.

How do I fix CVE-2023-3154?

No fix has been published for CVE-2023-3154 yet. Limit exposure of the affected software until one is available.

Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.

Is CVE-2023-3154 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-3154 exists.

Sources

Also known as GHSA-jp3p-m9qw-pgfj.