CVE-2023-2996

EUVD-2023-34432
The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
Affected Products (NVD)
VendorProductVersion
automatticjetpack
𝑥
< 12.1.1
𝑥
= Vulnerable software versions
References
https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/
https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663
https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/
https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663