CVE-2024-22144: falha crítica em Eli Scheetz Anti-Malware Security and…
WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.21.96 - Unauthenticated Predictable Nonce Brute-Force Leading to RCE vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9epss 0.9%
Improper Control of Generation of Code ('Code Injection') vulnerability in Eli Scheetz Anti-Malware Security and Brute-Force Firewall gotmls allows Code Injection.This issue affects Anti-Malware Security and Brute-Force Firewall: from n/a through 4.21.96.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Eli Scheetz · Anti-Malware Security and Brute-Force FirewallCVEs relacionadas — Eli Scheetz Anti-Malware Security and…
No mesmo produto, das mais perigosas para as menos.
Referências
https://patchstack.com/articles/critical-vulnerability-found-in-gotmls-plugin?_s_id=cvehttps://patchstack.com/database/vulnerability/gotmls/wordpress-anti-malware-security-and-brute-force-firewall-plugin-4-21-96-unauthenticated-predictable-nonce-brute-force-leading-to-rce-vulnerability?_s_id=cvehttps://sec.stealthcopter.com/cve-2024-22144/