CVE-2021-24947: thinkupthemes responsive_vector_maps Cross-Site Request Forgery (CSRF)

Vulnerability summary

CVE-2021-24947 is a high (CVSS 7.7) Cross-Site Request Forgery (CSRF) vulnerability in thinkupthemes responsive_vector_maps. EPSS estimates a 3.06% chance of exploitation in the next 30 days, higher than 87.5% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 07-02-2022
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, to read arbitrary files on the web server

• CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
• CWE-434Unrestricted Upload of File with Dangerous TypeThe product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
• CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.