CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
The Assistant for NextGEN Gallery plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation in the /wp-json/nextgenassistant/v1.0.0/control REST endpoint in all versions up to, and including, 1.0.9. This makes it possible for unauthenticated attackers to delete arbitrary directories on the server, which can cause a complete loss of availability.
Explanation of Vulnerability in Simple Terms
The Assistant for NextGEN Gallery plugin contains a path traversal vulnerability that allows an attacker to access files outside the intended directory. By crafting a malicious request with directory traversal sequences, an unauthenticated attacker can read arbitrary files from the server. This vulnerability affects versions 1.0.9 and earlier. No user interaction is required to exploit this issue.
What an attacker can do
Read arbitrary files from the server, including configuration files and sensitive data.
Potential impact on your site
Attackers can access sensitive files like database credentials, configuration, and private user data without logging in.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
