CVE-2022-0679 - Narnoo Distributor <= 2.5.1 - Unauthenticated LFI to Arbitrary File Read / RCE

Back Back to CVE browser

CRITICAL

Narnoo Distributor <= 2.5.1 - Unauthenticated LFI to Arbitrary File Read / RCE

Published Mar 28, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 47.83%

Description

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the lib_path parameter before it is passed into a call to require() via the narnoo_distributor_lib_request AJAX action (available to both unauthenticated and authenticated users) which results in the disclosure of arbitrary files as the content of the file is then displayed in the response as JSON data. This could also lead to RCE with various tricks but depends on the underlying system and it's configuration.

Affected products

Vendor n/a Product Narnoo Distributor Default
n/a
- Version
  2.5.1
  Status
  affected
  Constraints
  <=2.5.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Narnoo Distributor

n/a

Version	Status	Constraints
2.5.1	affected	<=2.5.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (1)

https://wpscan.com/vulnerability/0ea79eb1-6561-4c21-a20b-a1870863b0a8
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://wpscan.com/vulnerability/0ea79eb1-6561-4c21-a20b-a1870863b0a8		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner WPScan

Published Mar 28, 2022

Updated Aug 2, 2024

Reserved Feb 18, 2022

Link CVE-2022-0679

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-0679

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-0679