CVE-2022-3762

The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not validate files to download in some of its modules, which could allow ShopManager and Admin to download arbitrary files from the server even when they are not supposed to be able to (for example in multisite)

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://wpscan.com/vulnerability/96ef4bb8-a054-48ae-b29c-b3060acd01ac	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:booster:booster_for_woocommerce:::::elite:wordpress::
	cpe:2.3:a:booster:booster_for_woocommerce:::::plus:wordpress::
	cpe:2.3:a:booster:booster_for_woocommerce::::::wordpress::*

History

07 Nov 2023, 03:51

Type	Values Removed	Values Added
CWE	~~CWE-22~~

Information

Published : 2022-11-21 11:15

Updated : 2024-02-28 19:51

NVD link : CVE-2022-3762

Mitre link : CVE-2022-3762

CVE.ORG link : CVE-2022-3762

JSON object : View

Products Affected

booster

booster_for_woocommerce

CWE

No CWE.

{"id": "CVE-2022-3762", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2022-11-21T11:15:21.043", "references": [{"url": "https://wpscan.com/vulnerability/96ef4bb8-a054-48ae-b29c-b3060acd01ac", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}], "vulnStatus": "Modified", "descriptions": [{"lang": "en", "value": "The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not validate files to download in some of its modules, which could allow ShopManager and Admin to download arbitrary files from the server even when they are not supposed to be able to (for example in multisite)"}, {"lang": "es", "value": "El complemento Booster for WooCommerce WordPress anterior a 5.6.7, el complemento Booster Plus para WooCommerce WordPress anterior a 5.6.5, el complemento Booster Elite para WooCommerce WordPress anterior a 1.1.7 no validan archivos para descargar en algunos de sus m\u00f3dulos, lo que podr\u00eda permitir que ShopManager y Admin descargar archivos arbitrarios del servidor incluso cuando se supone que no pueden hacerlo (por ejemplo, en multisitio)"}], "lastModified": "2023-11-07T03:51:46.557", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:booster:booster_for_woocommerce:*:*:*:*:elite:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "C11EE041-6F7D-41A2-9CDF-0E23734B21D4", "versionEndExcluding": "1.1.7"}, {"criteria": "cpe:2.3:a:booster:booster_for_woocommerce:*:*:*:*:plus:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "3DDF2125-27BC-4444-8021-B2FCE2907F93", "versionEndExcluding": "5.6.5"}, {"criteria": "cpe:2.3:a:booster:booster_for_woocommerce:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "E968BF40-54EE-45C0-989E-7CDA3934E9B8", "versionEndExcluding": "5.6.7"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}