CVE-2023-4216 Orders Tracking for WooCommerce < 1.2.6 - Admin+ Arbitrary File Access/Read
High-privilege users can read arbitrary files on the server via path traversal in the CSV import feature.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-4216?
CVE-2023-4216 is a low-severity path traversal vulnerability in Unknown Orders Tracking for WooCommerce, published on 4 Sep 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the file_url parameter when importing a CSV file, allowing high privilege users with the manage_woocommerce capability to access any file on the web server via a Traversal attack. The content retrieved is however limited to the first line of the file.
Which versions are affected by CVE-2023-4216?
It affects 1 product.
Products include Villatheme Orders Tracking for Woocommerce.
How do I fix CVE-2023-4216?
No fix has been published for CVE-2023-4216 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2023-4216 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-4216 exists.
Other vulnerabilities in Unknown Orders Tracking for WooCommerce
Sources
Also known as GHSA-86mp-73cw-r9x3.