CVE-2022-2633

Summary

CVE	CVE-2022-2633
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-09-06 18:15:00 UTC
Updated	2024-01-11 09:15:00 UTC
Description	The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the ~/public/video.php file in versions up to, and including 2.6.0. This makes it possible for unauthenticated users to download sensitive files hosted on the affected server and forge requests to the server.

Risk And Classification

Problem Types: CWE-610

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Plugins360	All-in-one Video Gallery	All	All	All	All

References

Reference	Source	Link	Tags
403 Forbidden	MISC	plugins.trac.wordpress.org
403 Forbidden	MISC	plugins.trac.wordpress.org
403 Forbidden	MISC	plugins.trac.wordpress.org
Vulnerability Advisories - Wordfence	MISC	www.wordfence.com
All-in-One Video Gallery 2.5.8 - 2.6.0 - Arbitrary File Download & Server-Side Request Forgery		www.wordfence.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

Vendor Comments And Credit

Discovery Credit

LEGACY: Gabriele Zuddas

Legacy QID Mappings

730628 WordPress Plugin All In One Video Gallery Blind Server-Side Request Forgery (SSRF) Vulnerability