WPvivid Backup Plugin Unauthenticated Sensitive Data Exposure (CVE-2024-7315)

From this webpage screenshot, the following key vulnerability information can be extracted: 1. Plugin Name: Migration, Backup, Staging - WPvivid < 0.9.106 2. Vulnerability Type: Unauthenticated Sensitive Data Exposure 3. Description: The plugin uses insufficient randomness when generating backups, which may allow attackers to obtain sensitive information via brute force attacks. 4. Proof of Concept: - Run a backup - Note that the backup zip file is located at - Note that the hex timestamp is a string composed of seconds and microseconds ranging from 0 to 999,999 - By roughly estimating the backup time, attackers can brute-force the timestamp and recover the backup zip file 5. Affected Plugin: wpvivid-backuprestore 6. Fix Status: Fixed in version 0.9.106 7. Reference Link: https://research.cleantalk.org/cve-2024-7315/ 8. Classification: - Type: SENSITIVE DATA DISCLOSURE - OWASP Top 10: A3: Sensitive Data Exposure - CWE: CWE-200 - CVSS: 7.0 (High) 9. Additional Information: - Original Researcher: Dmitrii Ignatyev - Submitter: Dmitrii Ignatyev - Submitter Website: https://www.linkedin.com/in/dmitriy-ignatyev-8a9189267/ - Verified: Yes - WPVDB ID: 456b728b-a451-4afb-895f-850ddc4fb589 - Publication Date: 2024-09-11 - Added Date: 2024-09-11 - Last Updated Date: 2024-09-11 - Other Vulnerabilities Listed: - Tainacan < 0.20.7 - Unauthenticated Sensitive Information Exposure - Simple Job Board < 2.10.0 - Resume Disclosure via Directory Listing - Media Library Assistant < 3.01 - Unauthenticated Error Log Access - Solid Security Basic < 9.0.1 - Unauthenticated Login Page Disclosure - UsersWP < 1.2.12 - Users Information Disclosure

Goal Reached Thanks to every supporter — we hit 100%!

WPvivid Backup Plugin Unauthenticated Sensitive Data Exposure (CVE-2024-7315)

More from this source