#VU19313 Path traversal in Adaptive Images for WordPress - CVE-2019-14206

Description

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to the plugin contains a cache mechanism that allows the generated resized images to be saved and cached to prevent excessive resources usage. A remote attacker can send a specially crafted file and delete arbitrary files on the system.

The only condition to successfully exploit this vulnerability is that the file that we pass as "$source_file" is newer than the file that we pass as "$cache_file".

Remediation

External links

• https://github.com/markgruffer/markgruffer.github.io/blob/master/_posts/2019-07-19-adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.markdown
• https://markgruffer.github.io/2019/07/19/adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.html