CVE-2023-6266

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-6266
The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the BMI_BACKUP case of the handle_downloading function in all versions up to, and including, 1.3.6. This makes it possible for unauthenticated attackers to download back-up files which can contain sensitive information such as user passwords, PII, database credentials, and much more.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.5/includes/initializer.php#L1048 Issue Tracking
https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.5/includes/initializer.php#L972 Issue Tracking
https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.7/includes/initializer.php#L1065 Issue Tracking
https://www.wordfence.com/threat-intel/vulnerabilities/id/08801f53-3c57-41a3-a637-4b52637cc612?source=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:backupbliss:backup_migration:*:*:*:*:*:wordpress:*:*
History

17 Jan 2024, 20:13

Type Values Removed Values Added
CWE CWE-552
References () https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.5/includes/initializer.php#L1048 - () https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.5/includes/initializer.php#L1048 - Issue Tracking
References () https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.5/includes/initializer.php#L972 - () https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.5/includes/initializer.php#L972 - Issue Tracking
References () https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.7/includes/initializer.php#L1065 - () https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.7/includes/initializer.php#L1065 - Issue Tracking
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/08801f53-3c57-41a3-a637-4b52637cc612?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/08801f53-3c57-41a3-a637-4b52637cc612?source=cve - Third Party Advisory
First Time Backupbliss
Backupbliss backup Migration
CPE cpe:2.3:a:backupbliss:backup_migration:*:*:*:*:*:wordpress:*:*

11 Jan 2024, 13:57

Type Values Removed Values Added
Summary
  • (es) El complemento Backup Migration para WordPress es vulnerable al acceso no autorizado a los datos debido a una ruta y una validación de archivos insuficientes en el caso BMI_BACKUP de la función handle_downloading en todas las versiones hasta la 1.3.6 incluida. Esto hace posible que atacantes no autenticados descarguen archivos de respaldo que pueden contener información confidencial como contraseñas de usuario, PII, credenciales de bases de datos y mucho más.

11 Jan 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-11 09:15

Updated : 2024-01-17 20:13

NVD link : CVE-2023-6266

Mitre link : CVE-2023-6266

CVE.ORG link : CVE-2023-6266

JSON object : View

Products Affected

backupbliss

  • backup_migration
CWE
CWE-552

Files or Directories Accessible to External Parties