Vulnerability · Published Apr 25, 2022 · Assigned by WPScan
CVE-2022-0656uDraw < 3.3.3 - Unauthenticated Arbitrary File Access
High 7.5
In plain English
A high-severity security flaw in Web To Print Shop : uDraw from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 7.9% (higher than 95% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate the url parameter in its udraw_convert_url_to_base64 AJAX action (available to both unauthenticated and authenticated users) before using it in the file_get_contents function and returning its content base64 encoded in the response. As a result, unauthenticated users could read arbitrary files on the web server (such as /etc/passwd, wp-config.php etc)
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Web To Print Shop : uDraw | 3.3.3 – before 3.3.3 |
Weakness: CWE-552