2024-12-08 03:06:42 +00:00

72 lines
2.7 KiB
JSON

{
"id": "CVE-2020-36837",
"sourceIdentifier": "security@wordfence.com",
"published": "2024-10-16T07:15:08.927",
"lastModified": "2024-10-16T16:38:14.557",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the reset_wizard_actions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there is a user named 'admin', the attacker will become automatically logged in as an administrator."
},
{
"lang": "es",
"value": "El complemento ThemeGrill Demo Importer para WordPress es vulnerable a la omisi\u00f3n de autenticaci\u00f3n debido a una verificaci\u00f3n de capacidad faltante en la funci\u00f3n reset_wizard_actions en las versiones 1.3.4 a 1.6.1. Esto hace posible que los atacantes autenticados restablezcan la base de datos de WordPress. Despu\u00e9s de eso, si hay un usuario llamado 'admin', el atacante iniciar\u00e1 sesi\u00f3n autom\u00e1ticamente como administrador."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "security@wordfence.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.1,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "security@wordfence.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://raw.githubusercontent.com/themegrill/themegrill-demo-importer/master/CHANGELOG.txt",
"source": "security@wordfence.com"
},
{
"url": "https://www.openwall.com/lists/oss-security/2020/02/19/1",
"source": "security@wordfence.com"
},
{
"url": "https://www.webarxsecurity.com/critical-issue-in-themegrill-demo-importer/",
"source": "security@wordfence.com"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8c0dc694-854e-4f96-8c2d-7251c41a3ee9?source=cve",
"source": "security@wordfence.com"
}
]
}