ExploitCVE-2024-9022
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Summary
The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.3.9. This vulnerability is due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query.
Impact
This vulnerability allows authenticated attackers with Administrator-level access and above to append additional SQL queries to existing queries. This can be exploited to extract sensitive information from the database, potentially leading to unauthorized access to or modification of critical data. The impact is severe as it affects the confidentiality, integrity, and availability of the system, all rated as HIGH according to the CVSS score.
Exploitation
Multiple proof-of-concept exploits are available on github.com, packetstormsecurity.com. There is no evidence of proof of exploitation at the moment.
Patch
A patch is available. The vulnerability has been addressed in version 2.4.1 of the TS Poll plugin for WordPress. Users should upgrade to this version or later to mitigate the risk.
Mitigation
1. Immediately update the TS Poll plugin to version 2.4.1 or later. 2. Implement the principle of least privilege, limiting administrator access only to trusted users. 3. Regularly audit user accounts with elevated privileges. 4. Implement additional security layers such as Web Application Firewalls (WAF) to help detect and prevent SQL injection attempts. 5. Regularly monitor database logs for any suspicious activities or unauthorized queries. 6. If immediate patching is not possible, consider temporarily disabling the TS Poll plugin until it can be updated.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Timeline
Feedly found the first article mentioning CVE-2024-9022. See article
Feedly estimated the CVSS score as HIGH
NVD published the first details for CVE-2024-9022
A CVSS base score of 7.2 has been assigned.
EPSS Score was set to: 0.08% (Percentile: 35.5%)