CVE-2019-10869CWE-22CWE-434path-traversalunrestricted-file-upload

CVE-2019-10869

High · published May 7, 2019

CVSS v3.1
8.1
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an attacker to traverse the file system to access files and execute code via the includes/fields/upload.php (aka upload/submit page) name and tmp_name parameters.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.08059 · 94.8th percentile
Weaknesses
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2019-05-07T22:29Z
Affected products (1)
ProductVersionsFixed in
ninjaforms/ninja_forms_file_uploads< 3.0.233.0.23
References (5)
https://wpscan.com/vulnerability/e5898e0e-db43-4641-b2cd-f6a72cdb8993/ · [email protected]https://wpvulndb.com/vulnerabilities/9272 · [email protected]https://www.onvio.nl/nieuws/ninjaforms-vulnerability · [email protected]https://wpvulndb.com/vulnerabilities/9272 · af854a3a-2127-422b-91ae-364da2661108https://www.onvio.nl/nieuws/ninjaforms-vulnerability · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 07 MAY 17:07Z
    Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated)
    cvelistv5