Question 1

What is this vulnerability? (Essence + Consequences)

Accepted Answer

🚨 **Essence**: SQL Injection (SQLi) in OSM – OpenStreetMap plugin.
💥 **Consequences**: Attackers can extract sensitive data from the database.…

Question 2

Root Cause? (CWE/Flaw)

Accepted Answer

🛡️ **Root Cause**: CWE-89 (SQL Injection).
🔍 **Flaw**: Insufficient escaping of user-supplied parameters. The plugin fails to properly sanitize inputs before querying the database.

Question 3

Who is affected? (Versions/Components)

Accepted Answer

📦 **Affected**: WordPress Plugin: **OSM – OpenStreetMap**.
📅 **Version**: **6.0.2 and earlier**.
🏢 **Vendor**: photoweblog.

Question 4

What can hackers do? (Privileges/Data)

Accepted Answer

💻 **Attacker Actions**: Extract sensitive information from the database.
🔑 **Privileges**: Requires **Authenticated** access.
📊 **Impact**: High (C:H, I:H, A:H) according to CVSS 3.1.

Question 5

Is exploitation threshold high? (Auth/Config)

Accepted Answer

⚠️ **Threshold**: Medium.
🔒 **Requirement**: **Privileges Required: Low (PR:L)**.
👤 **Condition**: The attacker must be **authenticated** to exploit this vulnerability. It is not remote unauthenticated.

Question 6

Is there a public Exp? (PoC/Wild Exploitation)

Accepted Answer

🚫 **Public Exp?**: **No**.
📝 **PoC**: The `pocs` field is empty. No public Proof of Concept or wild exploitation code is currently available in the provided data.

Question 7

How to self-check? (Features/Scanning)

Accepted Answer

🔍 **Self-Check**:
1. Check WordPress plugin list for **OSM – OpenStreetMap**.
2. Verify version is **≤ 6.0.2**.
3. Use scanners to detect SQLi patterns in plugin endpoints if authenticated.

Question 8

Is it fixed officially? (Patch/Mitigation)

Accepted Answer

✅ **Fixed?**: **Yes**.
🔗 **Patch**: Reference to `plugins.trac.wordpress.org/changeset/3153019` indicates a fix was committed.…

Question 9

What if no patch? (Workaround)

Accepted Answer

🛡️ **Workaround**:
1. **Disable** the plugin if not strictly needed.
2. **Restrict access** to WordPress admin areas (since auth is required).
3.…

Question 10

Is it urgent? (Priority Suggestion)

Accepted Answer

🔥 **Urgency**: **High Priority**.
📉 **Reason**: CVSS Vector includes **S:C** (Changed Scope), meaning impact extends beyond the vulnerable component.…

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-3604 — AI Deep Analysis Summary

Q1What is this vulnerability? (Essence + Consequences)

Q2Root Cause? (CWE/Flaw)

Q3Who is affected? (Versions/Components)

Q4What can hackers do? (Privileges/Data)

Q5Is exploitation threshold high? (Auth/Config)

Q6Is there a public Exp? (PoC/Wild Exploitation)

Q7How to self-check? (Features/Scanning)

Q8Is it fixed officially? (Patch/Mitigation)

Q9What if no patch? (Workaround)

Q10Is it urgent? (Priority Suggestion)

Continue exploring