CVE-2024-25600

Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.

CVSS v3 10.0 CRITICAL

10.0^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/Chocapikk/CVE-2024-25600
https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT
https://patchstack.com/articles/critical-rce-patched-in-bricks-builder-theme?_s_id=cve
https://patchstack.com/database/vulnerability/bricks/wordpress-bricks-theme-1-9-6-unauthenticated-remote-code-execution-rce-vulnerability?_s_id=cve
https://snicco.io/vulnerability-disclosure/bricks/unauthenticated-rce-in-bricks-1-9-6
https://github.com/Chocapikk/CVE-2024-25600
https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT
https://patchstack.com/articles/critical-rce-patched-in-bricks-builder-theme?_s_id=cve
https://patchstack.com/database/vulnerability/bricks/wordpress-bricks-theme-1-9-6-unauthenticated-remote-code-execution-rce-vulnerability?_s_id=cve
https://snicco.io/vulnerability-disclosure/bricks/unauthenticated-rce-in-bricks-1-9-6

Configurations

No configuration.

History

21 Nov 2024, 09:01

Type	Values Removed	Values Added
Summary		(es) La vulnerabilidad de control inadecuado de la generación de código ("inyección de código") en Codeer Limited Bricks Builder permite la inyección de código. Este problema afecta a Bricks Builder: desde n/a hasta 1.9.6.
References	~~() https://github.com/Chocapikk/CVE-2024-25600 -~~	() https://github.com/Chocapikk/CVE-2024-25600 -
References	~~() https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT -~~	() https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT -
References	~~() https://patchstack.com/articles/critical-rce-patched-in-bricks-builder-theme?_s_id=cve -~~	() https://patchstack.com/articles/critical-rce-patched-in-bricks-builder-theme?_s_id=cve -
References	~~() https://patchstack.com/database/vulnerability/bricks/wordpress-bricks-theme-1-9-6-unauthenticated-remote-code-execution-rce-vulnerability?_s_id=cve -~~	() https://patchstack.com/database/vulnerability/bricks/wordpress-bricks-theme-1-9-6-unauthenticated-remote-code-execution-rce-vulnerability?_s_id=cve -
References	~~() https://snicco.io/vulnerability-disclosure/bricks/unauthenticated-rce-in-bricks-1-9-6 -~~	() https://snicco.io/vulnerability-disclosure/bricks/unauthenticated-rce-in-bricks-1-9-6 -

04 Jun 2024, 13:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-06-04 13:15

Updated : 2024-11-21 09:01

NVD link : CVE-2024-25600

Mitre link : CVE-2024-25600

CVE.ORG link : CVE-2024-25600

JSON object : View

Products Affected

No product.

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

10.0 /10