WP Rocket <= 2.10.3 - Local File Inclusion

2017-06-22 00:00
Paulos Yibelo

Strategic Overview

Status
Patched in 2.10.4
Affected PluginWP Rocket
Affected Version< 2.10.4
CVSS7.5High
CVECVE-2017-11658
View all WP Rocket vulnerabilities

Vulnerability Overview

In the WP Rocket plugin 2.10.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack.

Technical Analysis

REMEDIATION: Update to version 2.10.4, or a newer patched version --- IDENTIFIER: CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')) The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in require, include, or similar functions.

External References

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C