CVE-2020-11738
Quick assessment
Affected
n/a n/a
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。Snap Creek Duplicator是使用在其中的一个WordPress网站迁移插件。 WordPress Snap Creek Duplicator 1.3.28之前版本和Duplicator Pro 3.8.7.1之前版本中存在路径遍历漏洞。攻击者可通过向duplicator_download或duplicator_init发送带有‘../’序列的‘file’
Public Exploits 3
ExploitDB · 1
EDB-50420 [webapps]
Metasploit · 1
wp_duplicator_file_read.rb [auxiliary]
Nuclei · 1
CVE-2020-11738.yaml [template]
In-the-Wild Activity Observed
cisa_kev · confirmed
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-11738
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
WordPress Snap Creek Duplicator和Duplicator Pro 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。Snap Creek Duplicator是使用在其中的一个WordPress网站迁移插件。 WordPress Snap Creek Duplicator 1.3.28之前版本和Duplicator Pro 3.8.7.1之前版本中存在路径遍历漏洞。攻击者可通过向duplicator_download或duplicator_init发送带有‘../’序列的‘file’
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2020-11738
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | snapcreek_duplicator file read vulnerability https://www.cvedetails.com/cve/CVE-2020-11738/ | https://github.com/raghu66669999/wordpress-snapcreek | POC Details |
| 2 | WordPress Duplicator 1.3.24 & 1.3.26 are vulnerable to local file inclusion vulnerabilities that could allow attackers to download arbitrary files, such as the wp-config.php file. According to the vendor, the vulnerability was only in two versions v1.3.24 and v1.3.26, the vulnerability wasn't present in versions 1.3.22 and before. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11738.yaml | POC Details |
| 3 | None | https://github.com/Threekiii/Awesome-POC/blob/master/CMS%E6%BC%8F%E6%B4%9E/WordPress%20Duplicator%20duplicator.php%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%20CVE-2020-11738.md | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-11738
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-11738 (1)
Other References for CVE-2020-11738 (2)
-
https://snapcreek.com/duplicator/docs/changelog/?lite x_refsource_MISC
-
https://cwe.mitre.org/data/definitions/23.html x_refsource_MISC
Same Patch Batch · n/a · 2020-04-13 · 12 CVEs total
| CVE-2020-10642 | Rockwell Automation RSLinx Classic 安全漏洞 | |
| CVE-2020-10646 | Fuji Electric V-Server Lite 缓冲区错误漏洞 | |
| CVE-2020-11736 | GNOME file-roller 后置链接漏洞 | |
| CVE-2019-13916 | Cypress Semiconductor WICED Studio 缓冲区错误漏洞 | |
| CVE-2020-11734 | CyberSolutions CyberMail 跨站脚本漏洞 | |
| CVE-2020-8430 | Stormshield Network Security 输入验证错误漏洞 | |
| CVE-2020-11673 | WordPress Responsive Poll 授权问题漏洞 | |
| CVE-2020-9478 | Rubrik 操作系统命令注入漏洞 | |
| CVE-2020-8148 | Ubiquiti Networks UniFi Cloud Key 授权问题漏洞 | |
| CVE-2020-11731 | WordPress Media Library Assistant 跨站脚本漏洞 | |
| CVE-2020-11732 | WordPress Media Library Assistant 信息泄露漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2020-11738
No comments yet