Vulnerability · Published Sep 5, 2024 · Assigned by Wordfence
CVE-2024-7627Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition
High 8.1
In plain English
A high-severity code injection in Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress from bitpressadmin. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.8% (higher than 87% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated attackers to execute code on the server if an administrator has allowed Guest User read permissions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| bitpressadmin | Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress | 6.0 – through 6.5.5 |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/5f29de7a-3f15-4b6d-aad7-6a08151e2113?source=cve
- https://plugins.trac.wordpress.org/browser/file-manager/trunk/backend/app/Providers/FileEditValidator.php#L39
- https://plugins.trac.wordpress.org/browser/file-manager/trunk/backend/app/Providers/FileEditValidator.php#L88
- https://plugins.trac.wordpress.org/changeset/3138710/