CVE-2024-13791

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-13791

4.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

B

it Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the downloadResponseFile() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

References
Link Resource
https://github.com/WordPressBugBounty/plugins-bit-assist/blob/main/bit-assist/backend/app/HTTP/Controllers/DownloadController.php Product
https://plugins.trac.wordpress.org/changeset/3239816/#file3 Patch
https://wordpress.org/plugins/bit-assist/#developers Product Release Notes
https://www.wordfence.com/threat-intel/vulnerabilities/id/17fd14e7-503a-49e4-9344-5f8d51801eb3?source=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:bitapps:bit_assist:*:*:*:*:*:wordpress:*:*
History

25 Feb 2025, 04:01

Type Values Removed Values Added
CPE cpe:2.3:a:bitapps:bit_assist:*:*:*:*:*:wordpress:*:*
CWE CWE-22
First Time Bitapps
Bitapps bit Assist
Summary
  • (es) El complemento Bit Assist para WordPress es vulnerable a Path Traversal en todas las versiones hasta la 1.5.2 incluida a través de la función downloadResponseFile(). Esto permite que atacantes autenticados, con acceso de nivel de administrador o superior, lean el contenido de archivos arbitrarios en el servidor, que pueden contener información confidencial.
References () https://github.com/WordPressBugBounty/plugins-bit-assist/blob/main/bit-assist/backend/app/HTTP/Controllers/DownloadController.php - () https://github.com/WordPressBugBounty/plugins-bit-assist/blob/main/bit-assist/backend/app/HTTP/Controllers/DownloadController.php - Product
References () https://plugins.trac.wordpress.org/changeset/3239816/#file3 - () https://plugins.trac.wordpress.org/changeset/3239816/#file3 - Patch
References () https://wordpress.org/plugins/bit-assist/#developers - () https://wordpress.org/plugins/bit-assist/#developers - Product, Release Notes
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/17fd14e7-503a-49e4-9344-5f8d51801eb3?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/17fd14e7-503a-49e4-9344-5f8d51801eb3?source=cve - Third Party Advisory

14 Feb 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-14 11:15

Updated : 2025-02-25 04:01

NVD link : CVE-2024-13791

Mitre link : CVE-2024-13791

CVE.ORG link : CVE-2024-13791

JSON object : View

Products Affected

bitapps

CWE
CWE-23

Relative Path Traversal

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')