CVE-2024-9417

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-9417
The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to limited file uploads due to a misconfigured file type validation in the 'handleUpload' function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to upload files that are excluded from both the 'allowedExtensions' and 'unallowed_extensions' arrays on the affected site's server, including files that may contain cross-site scripting.

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://plugins.trac.wordpress.org/browser/hash-form/trunk/admin/classes/HashFormUploader.php#L107 Product
https://plugins.trac.wordpress.org/browser/hash-form/trunk/admin/classes/HashFormUploader.php#L135 Product
https://plugins.trac.wordpress.org/changeset/3161828/ Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/cad7731a-1f81-4055-9b49-15b35edd3fcf?source=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:hashthemes:hash_form:*:*:*:*:*:wordpress:*:*
History

27 Feb 2025, 19:30

Type Values Removed Values Added
CPE cpe:2.3:a:hashthemes:hash_form:*:*:*:*:*:wordpress:*:*
Summary
  • (es) El complemento Hash Form – Drag & Drop Form Builder para WordPress es vulnerable a la carga limitada de archivos debido a una validación de tipo de archivo mal configurada en la función 'handleUpload' en todas las versiones hasta la 1.1.9 incluida. Esto hace posible que atacantes no autenticados carguen archivos que están excluidos de las matrices 'allowedExtensions' y 'unallowed_extensions' en el servidor del sitio afectado, incluidos archivos que pueden contener cross-site scripting.
First Time Hashthemes hash Form
Hashthemes
References () https://plugins.trac.wordpress.org/browser/hash-form/trunk/admin/classes/HashFormUploader.php#L107 - () https://plugins.trac.wordpress.org/browser/hash-form/trunk/admin/classes/HashFormUploader.php#L107 - Product
References () https://plugins.trac.wordpress.org/browser/hash-form/trunk/admin/classes/HashFormUploader.php#L135 - () https://plugins.trac.wordpress.org/browser/hash-form/trunk/admin/classes/HashFormUploader.php#L135 - Product
References () https://plugins.trac.wordpress.org/changeset/3161828/ - () https://plugins.trac.wordpress.org/changeset/3161828/ - Patch
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/cad7731a-1f81-4055-9b49-15b35edd3fcf?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/cad7731a-1f81-4055-9b49-15b35edd3fcf?source=cve - Third Party Advisory

05 Oct 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-05 10:15

Updated : 2025-02-27 19:30

NVD link : CVE-2024-9417

Mitre link : CVE-2024-9417

CVE.ORG link : CVE-2024-9417

JSON object : View

Products Affected

hashthemes

  • hash_form
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type