CVE-2022-0377: LearnPress < 4.1.5 - Arbitrary Image Renaming
First published: Mon Feb 28 2022(Updated: )
Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the image. As a result of this request, the name of the user-supplied image is changed with a MD5 value. This process can be conducted only when type of the image is JPG or PNG. An attacker can use this vulnerability in order to rename an arbitrary image file. By doing this, they could destroy the design of the web site.
Credit: contact@wpscan.com contact@wpscan.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Thimpress Learnpress | <4.1.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-0377?
CVE-2022-0377 is a vulnerability in the LearnPress WordPress plugin before version 4.1.5 that allows users to upload an image as a profile avatar after registration.
What is the severity of CVE-2022-0377?
The severity of CVE-2022-0377 is medium with a CVSS score of 4.3.
How does CVE-2022-0377 affect the LearnPress WordPress plugin?
CVE-2022-0377 affects the LearnPress WordPress plugin before version 4.1.5 by allowing users to upload an image as a profile avatar after registration.
How can I fix CVE-2022-0377?
To fix CVE-2022-0377, it is recommended to update the LearnPress WordPress plugin to version 4.1.5 or later.
Is there any additional information about CVE-2022-0377?
Yes, you can find additional information about CVE-2022-0377 in the references provided: [Reference 1](https://bozogullarindan.com/en/2022/01/wordpress-learnpress-plugin-4.1.4.1-arbitrary-image-renaming/), [Reference 2](https://github.com/LearnPress/learnpress/commit/d1dc4af7ef2950f1000abc21bd9520fb3eb98faf), [Reference 3](https://wpscan.com/vulnerability/0d95ada6-53e3-4a80-a395-eacd7b090f26).
- collector/nvd-api
- collector/nvd-index
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/references
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- vendor/thimpress
- canonical/thimpress learnpress