VDB
BDU%3A2024-10549
BDU%3A2024-10549
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Уязвимость модулей для защиты от спама Spam protection, AntiSpam, FireWall плагина CleanTalk для системы управления содержимым сайта WordPress, связанная с недостатками процедуры авторизации, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cleantalk | antispam | 0 |
| cleantalk | Spam protection, Honeypot, Anti-Spam by CleanTalk | 0 |
| Сообщество свободного программного обеспечения | Spam protection, AntiSpam, FireWall |
Timeline
- Nov 26, 2024 CVE Published
- Nov 26, 2024 PoC Published
- Nov 26, 2024 PoC Published
- Nov 26, 2024 PoC Published
- Nov 26, 2024 PoC Published
- Nov 27, 2024 PoC Published
- Nov 27, 2024 PoC Published
- Nov 27, 2024 PoC Published
- Dec 2, 2024 CVE Updated
References
- https://plugins.trac.wordpress.org/changeset/3179819/cleantalk-spam-protect#file631 url
- https://www.wordfence.com/threat-intel/vulnerabilities/id/d7eb5fad-bb62-4f0b-ad52-b16c3e442b62?source=cve url
- https://plugins.trac.wordpress.org/browser/cleantalk-spam-protect/tags/6.43.2/lib/Cleantalk/ApbctWP/RemoteCalls.php#L41 url
- https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/cleantalk-spam-protect/spam-protection-anti-spam-firewall-by-cleantalk-6432-authorization-bypass-via-reverse-dns-spoofing-to-unauthenticated-arbitrary-plugin-installation advisory