#VU29191 Path traversal


Published: 2020-06-22

Vulnerability identifier: #VU29191

Vulnerability risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: N/A

CWE-ID: CWE-22

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme
Web applications / Modules and components for CMS

Vendor: King-Theme

Description

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences on the "bulk-delete" action. A remote authenticated attacker can recursively delete any folders and files by assigning the folder(s) relative path to the checked[] POST array.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme: 2.0.0 - 2.9.2

CPE

External links
http://wpvulndb.com/vulnerabilities/10270/
http://blog.nintechnet.com/wordpress-kingcomposer-page-builder-fixed-multiple-critical-vulnerabilities/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Multiple vulnerabilities in KingComposer Page Builder plugin for WordPress