CVE-2024-5852 WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal

What is CVE-2024-5852?

CVE-2024-5852 is a medium-severity path traversal vulnerability in nickboss Iptanus File Upload, published on 16 Jul 2024. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The WordPress File Upload plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.24.7 via the 'uploadpath' parameter of the wordpress_file_upload shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload limited files to arbitrary locations on the web server.

Weakness: CWE-22

Which versions are affected by CVE-2024-5852?

It affects 1 product.

Products include Iptanus Wordpress File Upload.

How do I fix CVE-2024-5852?

No fix has been published for CVE-2024-5852 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2024-5852 being exploited?

There is no known exploitation of CVE-2024-5852 in the wild and no public exploit code.

Other vulnerabilities in nickboss Iptanus File Upload

• CVE-2024-11613 Code injection in Iptanus File Upload Critical 9.8
• CVE-2024-11635 WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution Critical 9.8
• CVE-2024-9047 The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfu_file_downloader.php. Critical 9.8
• CVE-2020-10564 Path traversal in n/a Critical 9.8
• CVE-2021-24962 WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8j2w-hc9h-wm6f.