CVE-2017-11658

high-risk
Published 2017-07-26

In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack.

Do I need to act?

~
3.0% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (20)

Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket
Wp-Rocket

Affected Vendors

Wp-Rocket

References (6)

Exploit https://gist.github.com/Shinkurt/157dbb3767c9489f3d754f79b183a890
Release Notes https://wp-rocket.me/changelog
Third Party Advisory https://wpvulndb.com/vulnerabilities/8872
Exploit https://gist.github.com/Shinkurt/157dbb3767c9489f3d754f79b183a890
Release Notes https://wp-rocket.me/changelog
Third Party Advisory https://wpvulndb.com/vulnerabilities/8872
63
/ 100
high-risk
Severity 26/34 · High
Exploitability 6/34 · Minimal
Exposure 31/34 · Critical