Vulnerability · Published May 17, 2021 · Assigned by WPScan
CVE-2021-24295Time-based Blind SQL Injection in Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4
High 7.5
In plain English
A high-severity SQL injection in Spam protection, AntiSpam, FireWall by CleanTalk from СleanTalk. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.6% (higher than 93% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by CleanTalk WordPress Plugin before 5.153.4. The update_log function in lib/Cleantalk/ApbctWP/Firewall/SFW.php included a vulnerable query that could be injected via the User-Agent Header by manipulating the cookies set by the Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.153.4, sending an initial request to obtain a ct_sfw_pass_key cookie and then manually setting a separate ct_sfw_passed cookie and disallowing it from being reset.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| СleanTalk | Spam protection, AntiSpam, FireWall by CleanTalk | 5.153.4 – before 5.153.4 |
Weakness: CWE-89