CVE-2021-25094

Katalog CVE

CVSS 8.1 · High EPSS 83,4%

Kerentanan Missing Authentication for Critical Function pada brandexponents tatsu. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior authentication to upload a rogue zip file which is uncompressed under the WordPress's upload directory. By adding a PHP shell with a filename starting with a dot ".", this can bypass extension control implemented in the plugin. Moreover, there is a race condition in the zip extraction process which makes the shell file live long enough on the filesystem to be callable by an attacker.

Rincian

Terbit di NVD

25 April 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

83,4% peluang dieksploitasi; lebih tinggi dari 99,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://packetstormsecurity.com/files/167190/WordPress-Tatsu-Builder-Remote-Code-Execution.html exploit · advisory pihak ketiga · vdb entry
• https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ exploit · advisory pihak ketiga
• https://wpscan.com/vulnerability/fb0097a0-5d7b-4e5b-97de-aacafa8fffcd exploit · advisory pihak ketiga
• https://packetstorm.news/files/id/190566/
• https://www.exploit-db.com/exploits/52260