Vulnerability Description
The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request. This is a major vulnerability as the user input is not escaped and passed directly to the get_col function and it allows SQL injection. The Rest API endpoint which invokes this function also does not have any required permissions/authentication and can be accessed by an anonymous user.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ninjateam | Filebird | 4.7.3 |
Related Weaknesses (CWE)
References
- https://10up.com/blog/2021/security-vulnerability-filebird-wordpress-plugin/Third Party Advisory
- https://wpscan.com/vulnerability/754ac750-0262-4f65-b23e-d5523995fbfaExploitThird Party Advisory
- https://10up.com/blog/2021/security-vulnerability-filebird-wordpress-plugin/Third Party Advisory
- https://wpscan.com/vulnerability/754ac750-0262-4f65-b23e-d5523995fbfaExploitThird Party Advisory
FAQ
What is CVE-2021-24385?
CVE-2021-24385 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request. This is a major vulnerability as the user inpu...
How severe is CVE-2021-24385?
CVE-2021-24385 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-24385?
Check the references section above for vendor advisories and patch information. Affected products include: Ninjateam Filebird.