CVE-2023-2996 - Vulnerability Details

The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact total

Vendors	Products
Automattic	Jetpack

Configuration 1 [-]

cpe:2.3:a:automattic:jetpack:*:*:*:*:*:wordpress:*:*

No data.

References

Link	Providers
https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/
https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663

History

Thu, 05 Dec 2024 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2023-06-27T13:17:07.479Z

Updated: 2024-12-05T16:48:09.882Z

Reserved: 2023-05-30T19:10:08.911Z

Link: CVE-2023-2996

Vulnrichment

Updated: 2024-08-02T06:41:03.950Z

NVD

Status : Modified

Published: 2023-06-27T14:15:11.723

Modified: 2024-11-21T07:59:43.287

Link: CVE-2023-2996

Redhat

No data.

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-2996", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2023-05-30T19:10:08.911Z", "datePublished": "2023-06-27T13:17:07.479Z", "dateUpdated": "2024-12-05T16:48:09.882Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2023-06-27T13:17:07.479Z"}, "title": "Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API", "problemTypes": [{"descriptions": [{"description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "Jetpack", "versions": [{"status": "affected", "versionType": "custom", "version": "1.9", "lessThan": "2.0.9"}, {"status": "affected", "versionType": "custom", "version": "2.1", "lessThan": "2.1.7"}, {"status": "affected", "versionType": "custom", "version": "2.2", "lessThan": "2.2.10"}, {"status": "affected", "versionType": "custom", "version": "2.3", "lessThan": "2.3.10"}, {"status": "affected", "versionType": "custom", "version": "2.4", "lessThan": "2.4.7"}, {"status": "affected", "versionType": "custom", "version": "2.5", "lessThan": "2.5.5"}, {"status": "affected", "versionType": "custom", "version": "2.6", "lessThan": "2.6.6"}, {"status": "affected", "versionType": "custom", "version": "2.7", "lessThan": "2.7.5"}, {"status": "affected", "versionType": "custom", "version": "2.8", "lessThan": "2.8.5"}, {"status": "affected", "versionType": "custom", "version": "2.9", "lessThan": "2.9.6"}, {"status": "affected", "versionType": "custom", "version": "3.0", "lessThan": "3.0.6"}, {"status": "affected", "versionType": "custom", "version": "3.1", "lessThan": "3.1.5"}, {"status": "affected", "versionType": "custom", "version": "3.2", "lessThan": "3.2.5"}, {"status": "affected", "versionType": "custom", "version": "3.3", "lessThan": "3.3.6"}, {"status": "affected", "versionType": "custom", "version": "3.4", "lessThan": "3.4.6"}, {"status": "affected", "versionType": "custom", "version": "3.5", "lessThan": "3.5.6"}, {"status": "affected", "versionType": "custom", "version": "3.6", "lessThan": "3.6.4"}, {"status": "affected", "versionType": "custom", "version": "3.7", "lessThan": "3.7.5"}, {"status": "affected", "versionType": "custom", "version": "3.8", "lessThan": "3.8.5"}, {"status": "affected", "versionType": "custom", "version": "3.9", "lessThan": "3.9.9"}, {"status": "affected", "versionType": "custom", "version": "4.0", "lessThan": "4.0.6"}, {"status": "affected", "versionType": "custom", "version": "4.1", "lessThan": "4.1.3"}, {"status": "affected", "versionType": "custom", "version": "4.2", "lessThan": "4.2.4"}, {"status": "affected", "versionType": "custom", "version": "4.3", "lessThan": "4.3.4"}, {"status": "affected", "versionType": "custom", "version": "4.4", "lessThan": "4.4.4"}, {"status": "affected", "versionType": "custom", "version": "4.5", "lessThan": "4.5.2"}, {"status": "affected", "versionType": "custom", "version": "4.6", "lessThan": "4.6.2"}, {"status": "affected", "versionType": "custom", "version": "4.7", "lessThan": "4.7.3"}, {"status": "affected", "versionType": "custom", "version": "4.8", "lessThan": "4.8.4"}, {"status": "affected", "versionType": "custom", "version": "4.9", "lessThan": "4.9.2"}, {"status": "affected", "versionType": "custom", "version": "5.0", "lessThan": "5.0.2"}, {"status": "affected", "versionType": "custom", "version": "5.1", "lessThan": "5.1.3"}, {"status": "affected", "versionType": "custom", "version": "5.2", "lessThan": "5.2.4"}, {"status": "affected", "versionType": "custom", "version": "5.3", "lessThan": "5.3.3"}, {"status": "affected", "versionType": "custom", "version": "5.4", "lessThan": "5.4.3"}, {"status": "affected", "versionType": "custom", "version": "5.5", "lessThan": "5.5.4"}, {"status": "affected", "versionType": "custom", "version": "5.6", "lessThan": "5.6.4"}, {"status": "affected", "versionType": "custom", "version": "5.7", "lessThan": "5.7.4"}, {"status": "affected", "versionType": "custom", "version": "5.8", "lessThan": "5.8.3"}, {"status": "affected", "versionType": "custom", "version": "5.9", "lessThan": "5.9.3"}, {"status": "affected", "versionType": "custom", "version": "6.0", "lessThan": "6.0.3"}, {"status": "affected", "versionType": "custom", "version": "6.1", "lessThan": "6.1.4"}, {"status": "affected", "versionType": "custom", "version": "6.2", "lessThan": "6.2.4"}, {"status": "affected", "versionType": "custom", "version": "6.3", "lessThan": "6.3.6"}, {"status": "affected", "versionType": "custom", "version": "6.4", "lessThan": "6.4.5"}, {"status": "affected", "versionType": "custom", "version": "6.5", "lessThan": "6.5.3"}, {"status": "affected", "versionType": "custom", "version": "6.6", "lessThan": "6.6.4"}, {"status": "affected", "versionType": "custom", "version": "6.7", "lessThan": "6.7.3"}, {"status": "affected", "versionType": "custom", "version": "6.8", "lessThan": "6.8.4"}, {"status": "affected", "versionType": "custom", "version": "6.9", "lessThan": "6.9.3"}, {"status": "affected", "versionType": "custom", "version": "7.0", "lessThan": "7.0.4"}, {"status": "affected", "versionType": "custom", "version": "7.1", "lessThan": "7.1.4"}, {"status": "affected", "versionType": "custom", "version": "7.2", "lessThan": "7.2.4"}, {"status": "affected", "versionType": "custom", "version": "7.3", "lessThan": "7.3.4"}, {"status": "affected", "versionType": "custom", "version": "7.4", "lessThan": "7.4.4"}, {"status": "affected", "versionType": "custom", "version": "7.5", "lessThan": "7.5.6"}, {"status": "affected", "versionType": "custom", "version": "7.6", "lessThan": "7.6.3"}, {"status": "affected", "versionType": "custom", "version": "7.7", "lessThan": "7.7.5"}, {"status": "affected", "versionType": "custom", "version": "7.8", "lessThan": "7.8.3"}, {"status": "affected", "versionType": "custom", "version": "7.9", "lessThan": "7.9.3"}, {"status": "affected", "versionType": "custom", "version": "8.0", "lessThan": "8.0.2"}, {"status": "affected", "versionType": "custom", "version": "8.1", "lessThan": "8.1.3"}, {"status": "affected", "versionType": "custom", "version": "8.2", "lessThan": "8.2.5"}, {"status": "affected", "versionType": "custom", "version": "8.3", "lessThan": "8.3.2"}, {"status": "affected", "versionType": "custom", "version": "8.4", "lessThan": "8.4.4"}, {"status": "affected", "versionType": "custom", "version": "8.5", "lessThan": "8.5.2"}, {"status": "affected", "versionType": "custom", "version": "8.6", "lessThan": "8.6.3"}, {"status": "affected", "versionType": "custom", "version": "8.7", "lessThan": "8.7.3"}, {"status": "affected", "versionType": "custom", "version": "8.8", "lessThan": "8.8.4"}, {"status": "affected", "versionType": "custom", "version": "8.9", "lessThan": "8.9.3"}, {"status": "affected", "versionType": "custom", "version": "9.0", "lessThan": "9.0.4"}, {"status": "affected", "versionType": "custom", "version": "9.1", "lessThan": "9.1.2"}, {"status": "affected", "versionType": "custom", "version": "9.2", "lessThan": "9.2.3"}, {"status": "affected", "versionType": "custom", "version": "9.3", "lessThan": "9.3.4"}, {"status": "affected", "versionType": "custom", "version": "9.4", "lessThan": "9.4.3"}, {"status": "affected", "versionType": "custom", "version": "9.5", "lessThan": "9.5.4"}, {"status": "affected", "versionType": "custom", "version": "9.6", "lessThan": "9.6.3"}, {"status": "affected", "versionType": "custom", "version": "9.7", "lessThan": "9.7.2"}, {"status": "affected", "versionType": "custom", "version": "9.8", "lessThan": "9.8.2"}, {"status": "affected", "versionType": "custom", "version": "9.9", "lessThan": "9.9.2"}, {"status": "affected", "versionType": "custom", "version": "10.0", "lessThan": "10.0.1"}, {"status": "affected", "versionType": "custom", "version": "10.1", "lessThan": "10.1.1"}, {"status": "affected", "versionType": "custom", "version": "10.2", "lessThan": "10.2.2"}, {"status": "affected", "versionType": "custom", "version": "10.3", "lessThan": "10.3.1"}, {"status": "affected", "versionType": "custom", "version": "10.4", "lessThan": "10.4.1"}, {"status": "affected", "versionType": "custom", "version": "10.5", "lessThan": "10.5.2"}, {"status": "affected", "versionType": "custom", "version": "10.6", "lessThan": "10.6.2"}, {"status": "affected", "versionType": "custom", "version": "10.7", "lessThan": "10.7.1"}, {"status": "affected", "versionType": "custom", "version": "10.8", "lessThan": "10.8.1"}, {"status": "affected", "versionType": "custom", "version": "10.9", "lessThan": "10.9.2"}, {"status": "affected", "versionType": "custom", "version": "11.0", "lessThan": "11.0.1"}, {"status": "affected", "versionType": "custom", "version": "11.1", "lessThan": "11.1.3"}, {"status": "affected", "versionType": "custom", "version": "11.2", "lessThan": "11.2.1"}, {"status": "affected", "versionType": "custom", "version": "11.3", "lessThan": "11.3.3"}, {"status": "affected", "versionType": "custom", "version": "11.4", "lessThan": "11.4.1"}, {"status": "affected", "versionType": "custom", "version": "11.5", "lessThan": "11.5.2"}, {"status": "affected", "versionType": "custom", "version": "11.6", "lessThan": "11.6.1"}, {"status": "affected", "versionType": "custom", "version": "11.7", "lessThan": "11.7.2"}, {"status": "affected", "versionType": "custom", "version": "11.8", "lessThan": "11.8.5"}, {"status": "affected", "versionType": "custom", "version": "11.9", "lessThan": "11.9.2"}, {"status": "affected", "versionType": "custom", "version": "12.0", "lessThan": "12.0.1"}, {"status": "affected", "versionType": "custom", "version": "12.1", "lessThan": "12.1.1"}], "defaultStatus": "unaffected", "collectionURL": "https://wordpress.org/plugins"}], "descriptions": [{"lang": "en", "value": "The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization."}], "references": [{"url": "https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663", "tags": ["exploit", "vdb-entry", "technical-description"]}, {"url": "https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/", "tags": ["vendor-advisory"]}], "credits": [{"lang": "en", "value": "Miguel Neto", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T06:41:03.950Z"}, "title": "CVE Program Container", "references": [{"url": "https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663", "tags": ["exploit", "vdb-entry", "technical-description", "x_transferred"]}, {"url": "https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/", "tags": ["vendor-advisory", "x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-12-05T16:47:57.983039Z", "id": "CVE-2023-2996", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-05T16:48:09.882Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-2996 (string)

assignerOrgId : 1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81 (string)

state : PUBLISHED (string)

assignerShortName : WPScan (string)

dateReserved : 2023-05-30T19:10:08.911Z (string)

datePublished : 2023-06-27T13:17:07.479Z (string)

dateUpdated : 2024-12-05T16:48:09.882Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81 (string)

shortName : WPScan (string)

dateUpdated : 2023-06-27T13:17:07.479Z (string)

}

title : Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API (string)

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : CWE-20 Improper Input Validation (string)

lang : en (string)

type : CWE (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Unknown (string)

product : Jetpack (string)

versions : [ »

0 : { »

status : affected (string)

versionType : custom (string)

version : 1.9 (string)

lessThan : 2.0.9 (string)

}

1 : { »

status : affected (string)

versionType : custom (string)

version : 2.1 (string)

lessThan : 2.1.7 (string)

}

2 : { »

status : affected (string)

versionType : custom (string)

version : 2.2 (string)

lessThan : 2.2.10 (string)

}

3 : { »

status : affected (string)

versionType : custom (string)

version : 2.3 (string)

lessThan : 2.3.10 (string)

}

4 : { »

status : affected (string)

versionType : custom (string)

version : 2.4 (string)

lessThan : 2.4.7 (string)

}

5 : { »

status : affected (string)

versionType : custom (string)

version : 2.5 (string)

lessThan : 2.5.5 (string)

}

6 : { »

status : affected (string)

versionType : custom (string)

version : 2.6 (string)

lessThan : 2.6.6 (string)

}

7 : { »

status : affected (string)

versionType : custom (string)

version : 2.7 (string)

lessThan : 2.7.5 (string)

}

8 : { »

status : affected (string)

versionType : custom (string)

version : 2.8 (string)

lessThan : 2.8.5 (string)

}

9 : { »

status : affected (string)

versionType : custom (string)

version : 2.9 (string)

lessThan : 2.9.6 (string)

}

10 : { »

status : affected (string)

versionType : custom (string)

version : 3.0 (string)

lessThan : 3.0.6 (string)

}

11 : { »

status : affected (string)

versionType : custom (string)

version : 3.1 (string)

lessThan : 3.1.5 (string)

}

12 : { »

status : affected (string)

versionType : custom (string)

version : 3.2 (string)

lessThan : 3.2.5 (string)

}

13 : { »

status : affected (string)

versionType : custom (string)

version : 3.3 (string)

lessThan : 3.3.6 (string)

}

14 : { »

status : affected (string)

versionType : custom (string)

version : 3.4 (string)

lessThan : 3.4.6 (string)

}

15 : { »

status : affected (string)

versionType : custom (string)

version : 3.5 (string)

lessThan : 3.5.6 (string)

}

16 : { »

status : affected (string)

versionType : custom (string)

version : 3.6 (string)

lessThan : 3.6.4 (string)

}

17 : { »

status : affected (string)

versionType : custom (string)

version : 3.7 (string)

lessThan : 3.7.5 (string)

}

18 : { »

status : affected (string)

versionType : custom (string)

version : 3.8 (string)

lessThan : 3.8.5 (string)

}

19 : { »

status : affected (string)

versionType : custom (string)

version : 3.9 (string)

lessThan : 3.9.9 (string)

}

20 : { »

status : affected (string)

versionType : custom (string)

version : 4.0 (string)

lessThan : 4.0.6 (string)

}

21 : { »

status : affected (string)

versionType : custom (string)

version : 4.1 (string)

lessThan : 4.1.3 (string)

}

22 : { »

status : affected (string)

versionType : custom (string)

version : 4.2 (string)

lessThan : 4.2.4 (string)

}

23 : { »

status : affected (string)

versionType : custom (string)

version : 4.3 (string)

lessThan : 4.3.4 (string)

}

24 : { »

status : affected (string)

versionType : custom (string)

version : 4.4 (string)

lessThan : 4.4.4 (string)

}

25 : { »

status : affected (string)

versionType : custom (string)

version : 4.5 (string)

lessThan : 4.5.2 (string)

}

26 : { »

status : affected (string)

versionType : custom (string)

version : 4.6 (string)

lessThan : 4.6.2 (string)

}

27 : { »

status : affected (string)

versionType : custom (string)

version : 4.7 (string)

lessThan : 4.7.3 (string)

}

28 : { »

status : affected (string)

versionType : custom (string)

version : 4.8 (string)

lessThan : 4.8.4 (string)

}

29 : { »

status : affected (string)

versionType : custom (string)

version : 4.9 (string)

lessThan : 4.9.2 (string)

}

30 : { »

status : affected (string)

versionType : custom (string)

version : 5.0 (string)

lessThan : 5.0.2 (string)

}

31 : { »

status : affected (string)

versionType : custom (string)

version : 5.1 (string)

lessThan : 5.1.3 (string)

}

32 : { »

status : affected (string)

versionType : custom (string)

version : 5.2 (string)

lessThan : 5.2.4 (string)

}

33 : { »

status : affected (string)

versionType : custom (string)

version : 5.3 (string)

lessThan : 5.3.3 (string)

}

34 : { »

status : affected (string)

versionType : custom (string)

version : 5.4 (string)

lessThan : 5.4.3 (string)

}

35 : { »

status : affected (string)

versionType : custom (string)

version : 5.5 (string)

lessThan : 5.5.4 (string)

}

36 : { »

status : affected (string)

versionType : custom (string)

version : 5.6 (string)

lessThan : 5.6.4 (string)

}

37 : { »

status : affected (string)

versionType : custom (string)

version : 5.7 (string)

lessThan : 5.7.4 (string)

}

38 : { »

status : affected (string)

versionType : custom (string)

version : 5.8 (string)

lessThan : 5.8.3 (string)

}

39 : { »

status : affected (string)

versionType : custom (string)

version : 5.9 (string)

lessThan : 5.9.3 (string)

}

40 : { »

status : affected (string)

versionType : custom (string)

version : 6.0 (string)

lessThan : 6.0.3 (string)

}

41 : { »

status : affected (string)

versionType : custom (string)

version : 6.1 (string)

lessThan : 6.1.4 (string)

}

42 : { »

status : affected (string)

versionType : custom (string)

version : 6.2 (string)

lessThan : 6.2.4 (string)

}

43 : { »

status : affected (string)

versionType : custom (string)

version : 6.3 (string)

lessThan : 6.3.6 (string)

}

44 : { »

status : affected (string)

versionType : custom (string)

version : 6.4 (string)

lessThan : 6.4.5 (string)

}

45 : { »

status : affected (string)

versionType : custom (string)

version : 6.5 (string)

lessThan : 6.5.3 (string)

}

46 : { »

status : affected (string)

versionType : custom (string)

version : 6.6 (string)

lessThan : 6.6.4 (string)

}

47 : { »

status : affected (string)

versionType : custom (string)

version : 6.7 (string)

lessThan : 6.7.3 (string)

}

48 : { »

status : affected (string)

versionType : custom (string)

version : 6.8 (string)

lessThan : 6.8.4 (string)

}

49 : { »

status : affected (string)

versionType : custom (string)

version : 6.9 (string)

lessThan : 6.9.3 (string)

}

50 : { »

status : affected (string)

versionType : custom (string)

version : 7.0 (string)

lessThan : 7.0.4 (string)

}

51 : { »

status : affected (string)

versionType : custom (string)

version : 7.1 (string)

lessThan : 7.1.4 (string)

}

52 : { »

status : affected (string)

versionType : custom (string)

version : 7.2 (string)

lessThan : 7.2.4 (string)

}

53 : { »

status : affected (string)

versionType : custom (string)

version : 7.3 (string)

lessThan : 7.3.4 (string)

}

54 : { »

status : affected (string)

versionType : custom (string)

version : 7.4 (string)

lessThan : 7.4.4 (string)

}

55 : { »

status : affected (string)

versionType : custom (string)

version : 7.5 (string)

lessThan : 7.5.6 (string)

}

56 : { »

status : affected (string)

versionType : custom (string)

version : 7.6 (string)

lessThan : 7.6.3 (string)

}

57 : { »

status : affected (string)

versionType : custom (string)

version : 7.7 (string)

lessThan : 7.7.5 (string)

}

58 : { »

status : affected (string)

versionType : custom (string)

version : 7.8 (string)

lessThan : 7.8.3 (string)

}

59 : { »

status : affected (string)

versionType : custom (string)

version : 7.9 (string)

lessThan : 7.9.3 (string)

}

60 : { »

status : affected (string)

versionType : custom (string)

version : 8.0 (string)

lessThan : 8.0.2 (string)

}

61 : { »

status : affected (string)

versionType : custom (string)

version : 8.1 (string)

lessThan : 8.1.3 (string)

}

62 : { »

status : affected (string)

versionType : custom (string)

version : 8.2 (string)

lessThan : 8.2.5 (string)

}

63 : { »

status : affected (string)

versionType : custom (string)

version : 8.3 (string)

lessThan : 8.3.2 (string)

}

64 : { »

status : affected (string)

versionType : custom (string)

version : 8.4 (string)

lessThan : 8.4.4 (string)

}

65 : { »

status : affected (string)

versionType : custom (string)

version : 8.5 (string)

lessThan : 8.5.2 (string)

}

66 : { »

status : affected (string)

versionType : custom (string)

version : 8.6 (string)

lessThan : 8.6.3 (string)

}

67 : { »

status : affected (string)

versionType : custom (string)

version : 8.7 (string)

lessThan : 8.7.3 (string)

}

68 : { »

status : affected (string)

versionType : custom (string)

version : 8.8 (string)

lessThan : 8.8.4 (string)

}

69 : { »

status : affected (string)

versionType : custom (string)

version : 8.9 (string)

lessThan : 8.9.3 (string)

}

70 : { »

status : affected (string)

versionType : custom (string)

version : 9.0 (string)

lessThan : 9.0.4 (string)

}

71 : { »

status : affected (string)

versionType : custom (string)

version : 9.1 (string)

lessThan : 9.1.2 (string)

}

72 : { »

status : affected (string)

versionType : custom (string)

version : 9.2 (string)

lessThan : 9.2.3 (string)

}

73 : { »

status : affected (string)

versionType : custom (string)

version : 9.3 (string)

lessThan : 9.3.4 (string)

}

74 : { »

status : affected (string)

versionType : custom (string)

version : 9.4 (string)

lessThan : 9.4.3 (string)

}

75 : { »

status : affected (string)

versionType : custom (string)

version : 9.5 (string)

lessThan : 9.5.4 (string)

}

76 : { »

status : affected (string)

versionType : custom (string)

version : 9.6 (string)

lessThan : 9.6.3 (string)

}

77 : { »

status : affected (string)

versionType : custom (string)

version : 9.7 (string)

lessThan : 9.7.2 (string)

}

78 : { »

status : affected (string)

versionType : custom (string)

version : 9.8 (string)

lessThan : 9.8.2 (string)

}

79 : { »

status : affected (string)

versionType : custom (string)

version : 9.9 (string)

lessThan : 9.9.2 (string)

}

80 : { »

status : affected (string)

versionType : custom (string)

version : 10.0 (string)

lessThan : 10.0.1 (string)

}

81 : { »

status : affected (string)

versionType : custom (string)

version : 10.1 (string)

lessThan : 10.1.1 (string)

}

82 : { »

status : affected (string)

versionType : custom (string)

version : 10.2 (string)

lessThan : 10.2.2 (string)

}

83 : { »

status : affected (string)

versionType : custom (string)

version : 10.3 (string)

lessThan : 10.3.1 (string)

}

84 : { »

status : affected (string)

versionType : custom (string)

version : 10.4 (string)

lessThan : 10.4.1 (string)

}

85 : { »

status : affected (string)

versionType : custom (string)

version : 10.5 (string)

lessThan : 10.5.2 (string)

}

86 : { »

status : affected (string)

versionType : custom (string)

version : 10.6 (string)

lessThan : 10.6.2 (string)

}

87 : { »

status : affected (string)

versionType : custom (string)

version : 10.7 (string)

lessThan : 10.7.1 (string)

}

88 : { »

status : affected (string)

versionType : custom (string)

version : 10.8 (string)

lessThan : 10.8.1 (string)

}

89 : { »

status : affected (string)

versionType : custom (string)

version : 10.9 (string)

lessThan : 10.9.2 (string)

}

90 : { »

status : affected (string)

versionType : custom (string)

version : 11.0 (string)

lessThan : 11.0.1 (string)

}

91 : { »

status : affected (string)

versionType : custom (string)

version : 11.1 (string)

lessThan : 11.1.3 (string)

}

92 : { »

status : affected (string)

versionType : custom (string)

version : 11.2 (string)

lessThan : 11.2.1 (string)

}

93 : { »

status : affected (string)

versionType : custom (string)

version : 11.3 (string)

lessThan : 11.3.3 (string)

}

94 : { »

status : affected (string)

versionType : custom (string)

version : 11.4 (string)

lessThan : 11.4.1 (string)

}

95 : { »

status : affected (string)

versionType : custom (string)

version : 11.5 (string)

lessThan : 11.5.2 (string)

}

96 : { »

status : affected (string)

versionType : custom (string)

version : 11.6 (string)

lessThan : 11.6.1 (string)

}

97 : { »

status : affected (string)

versionType : custom (string)

version : 11.7 (string)

lessThan : 11.7.2 (string)

}

98 : { »

status : affected (string)

versionType : custom (string)

version : 11.8 (string)

lessThan : 11.8.5 (string)

}

99 : { »

status : affected (string)

versionType : custom (string)

version : 11.9 (string)

lessThan : 11.9.2 (string)

}

100 : { »

status : affected (string)

versionType : custom (string)

version : 12.0 (string)

lessThan : 12.0.1 (string)

}

101 : { »

status : affected (string)

versionType : custom (string)

version : 12.1 (string)

lessThan : 12.1.1 (string)

}

]

defaultStatus : unaffected (string)

collectionURL : https://wordpress.org/plugins (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization. (string)

}

]

references : [ »

0 : { »

url : https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663 (string)

tags : [ »

0 : exploit (string)

1 : vdb-entry (string)

2 : technical-description (string)

]

}

1 : { »

url : https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/ (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

credits : [ »

0 : { »

lang : en (string)

value : Miguel Neto (string)

type : finder (string)

}

1 : { »

lang : en (string)

value : WPScan (string)

type : coordinator (string)

}

]

source : { »

discovery : EXTERNAL (string)

}

x_generator : { »

engine : WPScan CVE Generator (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T06:41:03.950Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663 (string)

tags : [ »

0 : exploit (string)

1 : vdb-entry (string)

2 : technical-description (string)

3 : x_transferred (string)

]

}

1 : { »

url : https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/ (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-12-05T16:47:57.983039Z (string)

id : CVE-2023-2996 (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-05T16:48:09.882Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663", "tags": ["exploit", "vdb-entry", "technical-description", "x_transferred"]}, {"url": "https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T06:41:03.950Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-2996", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-12-05T16:47:57.983039Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-05T16:48:05.748Z"}}], "cna": {"title": "Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Miguel Neto"}, {"lang": "en", "type": "coordinator", "value": "WPScan"}], "affected": [{"vendor": "Unknown", "product": "Jetpack", "versions": [{"status": "affected", "version": "1.9", "lessThan": "2.0.9", "versionType": "custom"}, {"status": "affected", "version": "2.1", "lessThan": "2.1.7", "versionType": "custom"}, {"status": "affected", "version": "2.2", "lessThan": "2.2.10", "versionType": "custom"}, {"status": "affected", "version": "2.3", "lessThan": "2.3.10", "versionType": "custom"}, {"status": "affected", "version": "2.4", "lessThan": "2.4.7", "versionType": "custom"}, {"status": "affected", "version": "2.5", "lessThan": "2.5.5", "versionType": "custom"}, {"status": "affected", "version": "2.6", "lessThan": "2.6.6", "versionType": "custom"}, {"status": "affected", "version": "2.7", "lessThan": "2.7.5", "versionType": "custom"}, {"status": "affected", "version": "2.8", "lessThan": "2.8.5", "versionType": "custom"}, {"status": "affected", "version": "2.9", "lessThan": "2.9.6", "versionType": "custom"}, {"status": "affected", "version": "3.0", "lessThan": "3.0.6", "versionType": "custom"}, {"status": "affected", "version": "3.1", "lessThan": "3.1.5", "versionType": "custom"}, {"status": "affected", "version": "3.2", "lessThan": "3.2.5", "versionType": "custom"}, {"status": "affected", "version": "3.3", "lessThan": "3.3.6", "versionType": "custom"}, {"status": "affected", "version": "3.4", "lessThan": "3.4.6", "versionType": "custom"}, {"status": "affected", "version": "3.5", "lessThan": "3.5.6", "versionType": "custom"}, {"status": "affected", "version": "3.6", "lessThan": "3.6.4", "versionType": "custom"}, {"status": "affected", "version": "3.7", "lessThan": "3.7.5", "versionType": "custom"}, {"status": "affected", "version": "3.8", "lessThan": "3.8.5", "versionType": "custom"}, {"status": "affected", "version": "3.9", "lessThan": "3.9.9", "versionType": "custom"}, {"status": "affected", "version": "4.0", "lessThan": "4.0.6", "versionType": "custom"}, {"status": "affected", "version": "4.1", "lessThan": "4.1.3", "versionType": "custom"}, {"status": "affected", "version": "4.2", "lessThan": "4.2.4", "versionType": "custom"}, {"status": "affected", "version": "4.3", "lessThan": "4.3.4", "versionType": "custom"}, {"status": "affected", "version": "4.4", "lessThan": "4.4.4", "versionType": "custom"}, {"status": "affected", "version": "4.5", "lessThan": "4.5.2", "versionType": "custom"}, {"status": "affected", "version": "4.6", "lessThan": "4.6.2", "versionType": "custom"}, {"status": "affected", "version": "4.7", "lessThan": "4.7.3", "versionType": "custom"}, {"status": "affected", "version": "4.8", "lessThan": "4.8.4", "versionType": "custom"}, {"status": "affected", "version": "4.9", "lessThan": "4.9.2", "versionType": "custom"}, {"status": "affected", "version": "5.0", "lessThan": "5.0.2", "versionType": "custom"}, {"status": "affected", "version": "5.1", "lessThan": "5.1.3", "versionType": "custom"}, {"status": "affected", "version": "5.2", "lessThan": "5.2.4", "versionType": "custom"}, {"status": "affected", "version": "5.3", "lessThan": "5.3.3", "versionType": "custom"}, {"status": "affected", "version": "5.4", "lessThan": "5.4.3", "versionType": "custom"}, {"status": "affected", "version": "5.5", "lessThan": "5.5.4", "versionType": "custom"}, {"status": "affected", "version": "5.6", "lessThan": "5.6.4", "versionType": "custom"}, {"status": "affected", "version": "5.7", "lessThan": "5.7.4", "versionType": "custom"}, {"status": "affected", "version": "5.8", "lessThan": "5.8.3", "versionType": "custom"}, {"status": "affected", "version": "5.9", "lessThan": "5.9.3", "versionType": "custom"}, {"status": "affected", "version": "6.0", "lessThan": "6.0.3", "versionType": "custom"}, {"status": "affected", "version": "6.1", "lessThan": "6.1.4", "versionType": "custom"}, {"status": "affected", "version": "6.2", "lessThan": "6.2.4", "versionType": "custom"}, {"status": "affected", "version": "6.3", "lessThan": "6.3.6", "versionType": "custom"}, {"status": "affected", "version": "6.4", "lessThan": "6.4.5", "versionType": "custom"}, {"status": "affected", "version": "6.5", "lessThan": "6.5.3", "versionType": "custom"}, {"status": "affected", "version": "6.6", "lessThan": "6.6.4", "versionType": "custom"}, {"status": "affected", "version": "6.7", "lessThan": "6.7.3", "versionType": "custom"}, {"status": "affected", "version": "6.8", "lessThan": "6.8.4", "versionType": "custom"}, {"status": "affected", "version": "6.9", "lessThan": "6.9.3", "versionType": "custom"}, {"status": "affected", "version": "7.0", "lessThan": "7.0.4", "versionType": "custom"}, {"status": "affected", "version": "7.1", "lessThan": "7.1.4", "versionType": "custom"}, {"status": "affected", "version": "7.2", "lessThan": "7.2.4", "versionType": "custom"}, {"status": "affected", "version": "7.3", "lessThan": "7.3.4", "versionType": "custom"}, {"status": "affected", "version": "7.4", "lessThan": "7.4.4", "versionType": "custom"}, {"status": "affected", "version": "7.5", "lessThan": "7.5.6", "versionType": "custom"}, {"status": "affected", "version": "7.6", "lessThan": "7.6.3", "versionType": "custom"}, {"status": "affected", "version": "7.7", "lessThan": "7.7.5", "versionType": "custom"}, {"status": "affected", "version": "7.8", "lessThan": "7.8.3", "versionType": "custom"}, {"status": "affected", "version": "7.9", "lessThan": "7.9.3", "versionType": "custom"}, {"status": "affected", "version": "8.0", "lessThan": "8.0.2", "versionType": "custom"}, {"status": "affected", "version": "8.1", "lessThan": "8.1.3", "versionType": "custom"}, {"status": "affected", "version": "8.2", "lessThan": "8.2.5", "versionType": "custom"}, {"status": "affected", "version": "8.3", "lessThan": "8.3.2", "versionType": "custom"}, {"status": "affected", "version": "8.4", "lessThan": "8.4.4", "versionType": "custom"}, {"status": "affected", "version": "8.5", "lessThan": "8.5.2", "versionType": "custom"}, {"status": "affected", "version": "8.6", "lessThan": "8.6.3", "versionType": "custom"}, {"status": "affected", "version": "8.7", "lessThan": "8.7.3", "versionType": "custom"}, {"status": "affected", "version": "8.8", "lessThan": "8.8.4", "versionType": "custom"}, {"status": "affected", "version": "8.9", "lessThan": "8.9.3", "versionType": "custom"}, {"status": "affected", "version": "9.0", "lessThan": "9.0.4", "versionType": "custom"}, {"status": "affected", "version": "9.1", "lessThan": "9.1.2", "versionType": "custom"}, {"status": "affected", "version": "9.2", "lessThan": "9.2.3", "versionType": "custom"}, {"status": "affected", "version": "9.3", "lessThan": "9.3.4", "versionType": "custom"}, {"status": "affected", "version": "9.4", "lessThan": "9.4.3", "versionType": "custom"}, {"status": "affected", "version": "9.5", "lessThan": "9.5.4", "versionType": "custom"}, {"status": "affected", "version": "9.6", "lessThan": "9.6.3", "versionType": "custom"}, {"status": "affected", "version": "9.7", "lessThan": "9.7.2", "versionType": "custom"}, {"status": "affected", "version": "9.8", "lessThan": "9.8.2", "versionType": "custom"}, {"status": "affected", "version": "9.9", "lessThan": "9.9.2", "versionType": "custom"}, {"status": "affected", "version": "10.0", "lessThan": "10.0.1", "versionType": "custom"}, {"status": "affected", "version": "10.1", "lessThan": "10.1.1", "versionType": "custom"}, {"status": "affected", "version": "10.2", "lessThan": "10.2.2", "versionType": "custom"}, {"status": "affected", "version": "10.3", "lessThan": "10.3.1", "versionType": "custom"}, {"status": "affected", "version": "10.4", "lessThan": "10.4.1", "versionType": "custom"}, {"status": "affected", "version": "10.5", "lessThan": "10.5.2", "versionType": "custom"}, {"status": "affected", "version": "10.6", "lessThan": "10.6.2", "versionType": "custom"}, {"status": "affected", "version": "10.7", "lessThan": "10.7.1", "versionType": "custom"}, {"status": "affected", "version": "10.8", "lessThan": "10.8.1", "versionType": "custom"}, {"status": "affected", "version": "10.9", "lessThan": "10.9.2", "versionType": "custom"}, {"status": "affected", "version": "11.0", "lessThan": "11.0.1", "versionType": "custom"}, {"status": "affected", "version": "11.1", "lessThan": "11.1.3", "versionType": "custom"}, {"status": "affected", "version": "11.2", "lessThan": "11.2.1", "versionType": "custom"}, {"status": "affected", "version": "11.3", "lessThan": "11.3.3", "versionType": "custom"}, {"status": "affected", "version": "11.4", "lessThan": "11.4.1", "versionType": "custom"}, {"status": "affected", "version": "11.5", "lessThan": "11.5.2", "versionType": "custom"}, {"status": "affected", "version": "11.6", "lessThan": "11.6.1", "versionType": "custom"}, {"status": "affected", "version": "11.7", "lessThan": "11.7.2", "versionType": "custom"}, {"status": "affected", "version": "11.8", "lessThan": "11.8.5", "versionType": "custom"}, {"status": "affected", "version": "11.9", "lessThan": "11.9.2", "versionType": "custom"}, {"status": "affected", "version": "12.0", "lessThan": "12.0.1", "versionType": "custom"}, {"status": "affected", "version": "12.1", "lessThan": "12.1.1", "versionType": "custom"}], "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected"}], "references": [{"url": "https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663", "tags": ["exploit", "vdb-entry", "technical-description"]}, {"url": "https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "WPScan CVE Generator"}, "descriptions": [{"lang": "en", "value": "The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2023-06-27T13:17:07.479Z"}}}, "cveMetadata": {"cveId": "CVE-2023-2996", "state": "PUBLISHED", "dateUpdated": "2024-12-05T16:48:09.882Z", "dateReserved": "2023-05-30T19:10:08.911Z", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "datePublished": "2023-06-27T13:17:07.479Z", "assignerShortName": "WPScan"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663 (string)

tags : [ »

0 : exploit (string)

1 : vdb-entry (string)

2 : technical-description (string)

3 : x_transferred (string)

]

}

1 : { »

url : https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/ (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T06:41:03.950Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-2996 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-12-05T16:47:57.983039Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-05T16:48:05.748Z (string)

}

]

cna : { »

title : Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API (string)

source : { »

discovery : EXTERNAL (string)

}

credits : [ »

0 : { »

lang : en (string)

type : finder (string)

value : Miguel Neto (string)

}

1 : { »

lang : en (string)

type : coordinator (string)

value : WPScan (string)

}

]

affected : [ »

0 : { »

vendor : Unknown (string)

product : Jetpack (string)

versions : [ »

0 : { »

status : affected (string)

version : 1.9 (string)

lessThan : 2.0.9 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 2.1 (string)

lessThan : 2.1.7 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 2.2 (string)

lessThan : 2.2.10 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 2.3 (string)

lessThan : 2.3.10 (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : 2.4 (string)

lessThan : 2.4.7 (string)

versionType : custom (string)

}

5 : { »

status : affected (string)

version : 2.5 (string)

lessThan : 2.5.5 (string)

versionType : custom (string)

}

6 : { »

status : affected (string)

version : 2.6 (string)

lessThan : 2.6.6 (string)

versionType : custom (string)

}

7 : { »

status : affected (string)

version : 2.7 (string)

lessThan : 2.7.5 (string)

versionType : custom (string)

}

8 : { »

status : affected (string)

version : 2.8 (string)

lessThan : 2.8.5 (string)

versionType : custom (string)

}

9 : { »

status : affected (string)

version : 2.9 (string)

lessThan : 2.9.6 (string)

versionType : custom (string)

}

10 : { »

status : affected (string)

version : 3.0 (string)

lessThan : 3.0.6 (string)

versionType : custom (string)

}

11 : { »

status : affected (string)

version : 3.1 (string)

lessThan : 3.1.5 (string)

versionType : custom (string)

}

12 : { »

status : affected (string)

version : 3.2 (string)

lessThan : 3.2.5 (string)

versionType : custom (string)

}

13 : { »

status : affected (string)

version : 3.3 (string)

lessThan : 3.3.6 (string)

versionType : custom (string)

}

14 : { »

status : affected (string)

version : 3.4 (string)

lessThan : 3.4.6 (string)

versionType : custom (string)

}

15 : { »

status : affected (string)

version : 3.5 (string)

lessThan : 3.5.6 (string)

versionType : custom (string)

}

16 : { »

status : affected (string)

version : 3.6 (string)

lessThan : 3.6.4 (string)

versionType : custom (string)

}

17 : { »

status : affected (string)

version : 3.7 (string)

lessThan : 3.7.5 (string)

versionType : custom (string)

}

18 : { »

status : affected (string)

version : 3.8 (string)

lessThan : 3.8.5 (string)

versionType : custom (string)

}

19 : { »

status : affected (string)

version : 3.9 (string)

lessThan : 3.9.9 (string)

versionType : custom (string)

}

20 : { »

status : affected (string)

version : 4.0 (string)

lessThan : 4.0.6 (string)

versionType : custom (string)

}

21 : { »

status : affected (string)

version : 4.1 (string)

lessThan : 4.1.3 (string)

versionType : custom (string)

}

22 : { »

status : affected (string)

version : 4.2 (string)

lessThan : 4.2.4 (string)

versionType : custom (string)

}

23 : { »

status : affected (string)

version : 4.3 (string)

lessThan : 4.3.4 (string)

versionType : custom (string)

}

24 : { »

status : affected (string)

version : 4.4 (string)

lessThan : 4.4.4 (string)

versionType : custom (string)

}

25 : { »

status : affected (string)

version : 4.5 (string)

lessThan : 4.5.2 (string)

versionType : custom (string)

}

26 : { »

status : affected (string)

version : 4.6 (string)

lessThan : 4.6.2 (string)

versionType : custom (string)

}

27 : { »

status : affected (string)

version : 4.7 (string)

lessThan : 4.7.3 (string)

versionType : custom (string)

}

28 : { »

status : affected (string)

version : 4.8 (string)

lessThan : 4.8.4 (string)

versionType : custom (string)

}

29 : { »

status : affected (string)

version : 4.9 (string)

lessThan : 4.9.2 (string)

versionType : custom (string)

}

30 : { »

status : affected (string)

version : 5.0 (string)

lessThan : 5.0.2 (string)

versionType : custom (string)

}

31 : { »

status : affected (string)

version : 5.1 (string)

lessThan : 5.1.3 (string)

versionType : custom (string)

}

32 : { »

status : affected (string)

version : 5.2 (string)

lessThan : 5.2.4 (string)

versionType : custom (string)

}

33 : { »

status : affected (string)

version : 5.3 (string)

lessThan : 5.3.3 (string)

versionType : custom (string)

}

34 : { »

status : affected (string)

version : 5.4 (string)

lessThan : 5.4.3 (string)

versionType : custom (string)

}

35 : { »

status : affected (string)

version : 5.5 (string)

lessThan : 5.5.4 (string)

versionType : custom (string)

}

36 : { »

status : affected (string)

version : 5.6 (string)

lessThan : 5.6.4 (string)

versionType : custom (string)

}

37 : { »

status : affected (string)

version : 5.7 (string)

lessThan : 5.7.4 (string)

versionType : custom (string)

}

38 : { »

status : affected (string)

version : 5.8 (string)

lessThan : 5.8.3 (string)

versionType : custom (string)

}

39 : { »

status : affected (string)

version : 5.9 (string)

lessThan : 5.9.3 (string)

versionType : custom (string)

}

40 : { »

status : affected (string)

version : 6.0 (string)

lessThan : 6.0.3 (string)

versionType : custom (string)

}

41 : { »

status : affected (string)

version : 6.1 (string)

lessThan : 6.1.4 (string)

versionType : custom (string)

}

42 : { »

status : affected (string)

version : 6.2 (string)

lessThan : 6.2.4 (string)

versionType : custom (string)

}

43 : { »

status : affected (string)

version : 6.3 (string)

lessThan : 6.3.6 (string)

versionType : custom (string)

}

44 : { »

status : affected (string)

version : 6.4 (string)

lessThan : 6.4.5 (string)

versionType : custom (string)

}

45 : { »

status : affected (string)

version : 6.5 (string)

lessThan : 6.5.3 (string)

versionType : custom (string)

}

46 : { »

status : affected (string)

version : 6.6 (string)

lessThan : 6.6.4 (string)

versionType : custom (string)

}

47 : { »

status : affected (string)

version : 6.7 (string)

lessThan : 6.7.3 (string)

versionType : custom (string)

}

48 : { »

status : affected (string)

version : 6.8 (string)

lessThan : 6.8.4 (string)

versionType : custom (string)

}

49 : { »

status : affected (string)

version : 6.9 (string)

lessThan : 6.9.3 (string)

versionType : custom (string)

}

50 : { »

status : affected (string)

version : 7.0 (string)

lessThan : 7.0.4 (string)

versionType : custom (string)

}

51 : { »

status : affected (string)

version : 7.1 (string)

lessThan : 7.1.4 (string)

versionType : custom (string)

}

52 : { »

status : affected (string)

version : 7.2 (string)

lessThan : 7.2.4 (string)

versionType : custom (string)

}

53 : { »

status : affected (string)

version : 7.3 (string)

lessThan : 7.3.4 (string)

versionType : custom (string)

}

54 : { »

status : affected (string)

version : 7.4 (string)

lessThan : 7.4.4 (string)

versionType : custom (string)

}

55 : { »

status : affected (string)

version : 7.5 (string)

lessThan : 7.5.6 (string)

versionType : custom (string)

}

56 : { »

status : affected (string)

version : 7.6 (string)

lessThan : 7.6.3 (string)

versionType : custom (string)

}

57 : { »

status : affected (string)

version : 7.7 (string)

lessThan : 7.7.5 (string)

versionType : custom (string)

}

58 : { »

status : affected (string)

version : 7.8 (string)

lessThan : 7.8.3 (string)

versionType : custom (string)

}

59 : { »

status : affected (string)

version : 7.9 (string)

lessThan : 7.9.3 (string)

versionType : custom (string)

}

60 : { »

status : affected (string)

version : 8.0 (string)

lessThan : 8.0.2 (string)

versionType : custom (string)

}

61 : { »

status : affected (string)

version : 8.1 (string)

lessThan : 8.1.3 (string)

versionType : custom (string)

}

62 : { »

status : affected (string)

version : 8.2 (string)

lessThan : 8.2.5 (string)

versionType : custom (string)

}

63 : { »

status : affected (string)

version : 8.3 (string)

lessThan : 8.3.2 (string)

versionType : custom (string)

}

64 : { »

status : affected (string)

version : 8.4 (string)

lessThan : 8.4.4 (string)

versionType : custom (string)

}

65 : { »

status : affected (string)

version : 8.5 (string)

lessThan : 8.5.2 (string)

versionType : custom (string)

}

66 : { »

status : affected (string)

version : 8.6 (string)

lessThan : 8.6.3 (string)

versionType : custom (string)

}

67 : { »

status : affected (string)

version : 8.7 (string)

lessThan : 8.7.3 (string)

versionType : custom (string)

}

68 : { »

status : affected (string)

version : 8.8 (string)

lessThan : 8.8.4 (string)

versionType : custom (string)

}

69 : { »

status : affected (string)

version : 8.9 (string)

lessThan : 8.9.3 (string)

versionType : custom (string)

}

70 : { »

status : affected (string)

version : 9.0 (string)

lessThan : 9.0.4 (string)

versionType : custom (string)

}

71 : { »

status : affected (string)

version : 9.1 (string)

lessThan : 9.1.2 (string)

versionType : custom (string)

}

72 : { »

status : affected (string)

version : 9.2 (string)

lessThan : 9.2.3 (string)

versionType : custom (string)

}

73 : { »

status : affected (string)

version : 9.3 (string)

lessThan : 9.3.4 (string)

versionType : custom (string)

}

74 : { »

status : affected (string)

version : 9.4 (string)

lessThan : 9.4.3 (string)

versionType : custom (string)

}

75 : { »

status : affected (string)

version : 9.5 (string)

lessThan : 9.5.4 (string)

versionType : custom (string)

}

76 : { »

status : affected (string)

version : 9.6 (string)

lessThan : 9.6.3 (string)

versionType : custom (string)

}

77 : { »

status : affected (string)

version : 9.7 (string)

lessThan : 9.7.2 (string)

versionType : custom (string)

}

78 : { »

status : affected (string)

version : 9.8 (string)

lessThan : 9.8.2 (string)

versionType : custom (string)

}

79 : { »

status : affected (string)

version : 9.9 (string)

lessThan : 9.9.2 (string)

versionType : custom (string)

}

80 : { »

status : affected (string)

version : 10.0 (string)

lessThan : 10.0.1 (string)

versionType : custom (string)

}

81 : { »

status : affected (string)

version : 10.1 (string)

lessThan : 10.1.1 (string)

versionType : custom (string)

}

82 : { »

status : affected (string)

version : 10.2 (string)

lessThan : 10.2.2 (string)

versionType : custom (string)

}

83 : { »

status : affected (string)

version : 10.3 (string)

lessThan : 10.3.1 (string)

versionType : custom (string)

}

84 : { »

status : affected (string)

version : 10.4 (string)

lessThan : 10.4.1 (string)

versionType : custom (string)

}

85 : { »

status : affected (string)

version : 10.5 (string)

lessThan : 10.5.2 (string)

versionType : custom (string)

}

86 : { »

status : affected (string)

version : 10.6 (string)

lessThan : 10.6.2 (string)

versionType : custom (string)

}

87 : { »

status : affected (string)

version : 10.7 (string)

lessThan : 10.7.1 (string)

versionType : custom (string)

}

88 : { »

status : affected (string)

version : 10.8 (string)

lessThan : 10.8.1 (string)

versionType : custom (string)

}

89 : { »

status : affected (string)

version : 10.9 (string)

lessThan : 10.9.2 (string)

versionType : custom (string)

}

90 : { »

status : affected (string)

version : 11.0 (string)

lessThan : 11.0.1 (string)

versionType : custom (string)

}

91 : { »

status : affected (string)

version : 11.1 (string)

lessThan : 11.1.3 (string)

versionType : custom (string)

}

92 : { »

status : affected (string)

version : 11.2 (string)

lessThan : 11.2.1 (string)

versionType : custom (string)

}

93 : { »

status : affected (string)

version : 11.3 (string)

lessThan : 11.3.3 (string)

versionType : custom (string)

}

94 : { »

status : affected (string)

version : 11.4 (string)

lessThan : 11.4.1 (string)

versionType : custom (string)

}

95 : { »

status : affected (string)

version : 11.5 (string)

lessThan : 11.5.2 (string)

versionType : custom (string)

}

96 : { »

status : affected (string)

version : 11.6 (string)

lessThan : 11.6.1 (string)

versionType : custom (string)

}

97 : { »

status : affected (string)

version : 11.7 (string)

lessThan : 11.7.2 (string)

versionType : custom (string)

}

98 : { »

status : affected (string)

version : 11.8 (string)

lessThan : 11.8.5 (string)

versionType : custom (string)

}

99 : { »

status : affected (string)

version : 11.9 (string)

lessThan : 11.9.2 (string)

versionType : custom (string)

}

100 : { »

status : affected (string)

version : 12.0 (string)

lessThan : 12.0.1 (string)

versionType : custom (string)

}

101 : { »

status : affected (string)

version : 12.1 (string)

lessThan : 12.1.1 (string)

versionType : custom (string)

}

]

collectionURL : https://wordpress.org/plugins (string)

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663 (string)

tags : [ »

0 : exploit (string)

1 : vdb-entry (string)

2 : technical-description (string)

]

}

1 : { »

url : https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/ (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

x_generator : { »

engine : WPScan CVE Generator (string)

}

descriptions : [ »

0 : { »

lang : en (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

description : CWE-20 Improper Input Validation (string)

}

]

}

]

providerMetadata : { »

orgId : 1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81 (string)

shortName : WPScan (string)

dateUpdated : 2023-06-27T13:17:07.479Z (string)

}

cveMetadata : { »

cveId : CVE-2023-2996 (string)

state : PUBLISHED (string)

dateUpdated : 2024-12-05T16:48:09.882Z (string)

dateReserved : 2023-05-30T19:10:08.911Z (string)

assignerOrgId : 1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81 (string)

datePublished : 2023-06-27T13:17:07.479Z (string)

assignerShortName : WPScan (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:automattic:jetpack:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "F5E11109-F3B9-4201-9C0B-94D8FDD0ECE4", "versionEndExcluding": "12.1.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization."}], "id": "CVE-2023-2996", "lastModified": "2024-11-21T07:59:43.287", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-06-27T14:15:11.723", "references": [{"source": "contact@wpscan.com", "tags": ["Vendor Advisory"], "url": "https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/"}, {"source": "contact@wpscan.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Modified"}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:automattic:jetpack:*:*:*:*:*:wordpress:*:* (string)

matchCriteriaId : F5E11109-F3B9-4201-9C0B-94D8FDD0ECE4 (string)

versionEndExcluding : 12.1.1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

}

]

id : CVE-2023-2996 (string)

lastModified : 2024-11-21T07:59:43.287 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-06-27T14:15:11.723 (string)

references : [ »

0 : { »

source : contact@wpscan.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/ (string)

}

1 : { »

source : contact@wpscan.com (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/ (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663 (string)

}

]

sourceIdentifier : contact@wpscan.com (string)

vulnStatus : Modified (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation poc

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object