High severity · published Sep 5, 2024
CVE-2024-7627
Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition
8.1
CVSS
2.8%
EPSS
No
On KEV
Description
The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated attackers to execute code on the server if an administrator has allowed Guest User read permissions.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BF
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress · bitpressadmin
6.0 through 6.5.5 · source: vendor
FM
File Manager · Bitapps
6.0 before 6.5.6 · source: NVD, CISA
Affected product
BF
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress
bitpressadmin
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-7627
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-7627
Product
https://plugins.trac.wordpress.org/browser/file-manager/trunk/backend/app/Providers/FileEditValidator.php#L39
Product
https://plugins.trac.wordpress.org/browser/file-manager/trunk/backend/app/Providers/FileEditValidator.php#L88
Patch
https://plugins.trac.wordpress.org/changeset/3138710/
Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/5f29de7a-3f15-4b6d-aad7-6a08151e2113?source=cve