PT-2021-16328
CVE-2021-24847
·
تاريخ النشر
2021-11-17
·
تاريخ التحديث
2021-11-19
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
SEO Redirection Plugin – 301 Redirect Manager WordPress plugin versions prior to 8.2
Description:
The importFromRedirection AJAX action does not properly sanitise the
offset parameter before using it in a SQL statement, leading to an SQL injection. This issue is available to any authenticated user when the redirection plugin is also installed.Recommendations:
For versions prior to 8.2, update to version 8.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the importFromRedirection AJAX action until a patch is available. Avoid using the
offset parameter in the affected AJAX action until the issue is resolved.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾