HIGH

CVE-2021-24307

CVSS v3

8.8

HIGH

EPSS Score

41.8%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseo_tools_settings" privilege (most of the time admin) to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup .ini file in the section "Tool > Import/Export". However, the plugin attempts to unserialize values of the .ini file. Moreover, the plugin embeds Monolog library which can be used to craft a gadget chain and thus trigger system command execution.

Technical details

Published
5/24/2021

Frequently asked questions

What is CVE-2021-24307?

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseo_tools_settings" privilege (most of the time admin) to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup .ini file in the section "Tool > Import/Export". However, the plugin attempts to unserialize values of the .ini file. Moreover, the plugin embeds Monolog library which can be used to craft a gadget chain and thus trigger system command execution.

Is CVE-2021-24307 actively exploited?

Active exploitation of CVE-2021-24307 has not been confirmed. The EPSS score is 41.8%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2021-24307?

CVE-2021-24307 has a CVSS v3 base score of 8.8 (HIGH severity).

Is CVE-2021-24307 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.