CVE-2024-13367 - Sandbox <= 0.4 - Missing Authorization to Authenticated (Subscriber+) Sandbox Download

Back Back to CVE browser

MEDIUM

Sandbox <= 0.4 - Missing Authorization to Authenticated (Subscriber+) Sandbox Download

Published Jan 17, 2025

6.5

MEDIUM

CVSS 3.1

EPSS 0.37%

Description

The Sandbox plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the export_download action in all versions up to, and including, 0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to download an entire copy of a sandbox environment which can contain sensitive information like the wp-config.php file.

Affected products

Vendor Barteled Product Sandbox Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=0.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Barteled

Sandbox

unaffected

Version	Status	Constraints
0	affected	<=0.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-51558		Advisory
https://plugins.trac.wordpress.org/browser/sandbox/trunk/sandbox-ajax.php#L21
https://www.wordfence.com/threat-intel/vulnerabilities/id/59880d92-5d75-432f-9fb5-d74b13d101ff?source=cve