VDB
BDU%3A2024-10548
BDU%3A2024-10548
PUBLISHED
CVSS 8.100000381469727 HIGH
Уязвимость модулей защиты от спама Spam protection, AntiSpam, FireWall плагина CleanTalk для системы управления содержимым сайта WordPress, связанная с некорректной обработкой исключительных состояний, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cleantalk | antispam | 0 |
| Сообщество свободного программного обеспечения | Spam protection, AntiSpam, FireWall | |
| cleantalk | Spam protection, Honeypot, Anti-Spam by CleanTalk | 0 |
Timeline
- Nov 26, 2024 CVE Published
- Nov 26, 2024 PoC Published
- Nov 26, 2024 PoC Published
- Nov 26, 2024 PoC Published
- Nov 26, 2024 PoC Published
- Nov 27, 2024 PoC Published
- Nov 27, 2024 PoC Published
- Dec 2, 2024 CVE Updated
References
- https://plugins.trac.wordpress.org/browser/cleantalk-spam-protect/tags/6.44/lib/Cleantalk/ApbctWP/RemoteCalls.php#L95 url
- https://plugins.trac.wordpress.org/browser/cleantalk-spam-protect/tags/6.44/lib/Cleantalk/ApbctWP/RemoteCalls.php#L96 url
- https://plugins.trac.wordpress.org/changeset/3188546/cleantalk-spam-protect#file653 advisory
- https://www.wordfence.com/threat-intel/vulnerabilities/id/79ae062c-b084-4045-9407-2d94919993af?source=cve url