Vulnerability · Published Apr 19, 2022 · Assigned by Wordfence
CVE-2022-1119Simple File List <= 3.2.7 - Arbitrary File Download
High 7.5
In plain English
A high-severity path traversal in Simple File List from eemitch. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 20.0% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Official description
The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php file due to missing controls which makes it possible unauthenticated attackers to supply a path to a file that will subsequently be downloaded, in versions up to and including 3.2.7.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| eemitch | Simple File List | 0 – through 3.2.7 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/ff21241d-e488-4460-b8c2-d5a070c8c107?source=cve
- https://plugins.trac.wordpress.org/browser/simple-file-list/trunk/includes/ee-downloader.php?rev=2071880
- https://wpscan.com/vulnerability/075a3cc5-1970-4b64-a16f-3ec97e22b606
- https://docs.google.com/document/d/1qIZXTzEpI4tO6832vk1KfsSAroT0FY2l--THlhJ8z3c/edit