CVE-2022-1560

{"id": "CVE-2022-1560", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2022-05-16T15:15:10.130", "references": [{"url": "https://wpscan.com/vulnerability/5c5fbbea-92d2-46bb-9a70-75155fffb6de", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/5c5fbbea-92d2-46bb-9a70-75155fffb6de", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "contact@wpscan.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "The Amministrazione Aperta WordPress plugin before 3.8 does not validate the open parameter before using it in an include statement, leading to a Local File Inclusion issue. The original advisory mentions that unauthenticated users can exploit this, however the affected file generates a fatal error when accessed directly and the affected code is not reached. The issue can be exploited via the dashboard when logged in as an admin, or by making a logged in admin open a malicious link"}, {"lang": "es", "value": "El plugin Amministrazione Aperta WordPress antes de la versi\u00f3n 3.8 no valida el par\u00e1metro open antes de utilizarlo en una sentencia include, lo que lleva a un problema de inclusi\u00f3n de archivos locales. El aviso original menciona que los usuarios no autenticados pueden explotar esto, sin embargo el archivo afectado genera un error fatal cuando se accede directamente y el c\u00f3digo afectado no es alcanzado. El problema puede ser explotado a trav\u00e9s del panel de control cuando se inicia la sesi\u00f3n como administrador, o haciendo que un administrador conectado abra un enlace malicioso"}], "lastModified": "2024-11-21T06:40:58.197", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:amministrazione_aperta_project:amministrazione_aperta:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "FD86B4B7-CE43-4645-8D4A-42AECAF35198", "versionEndExcluding": "3.8"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}