CVE-2022-29411 - OpenCVE

SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers to execute SQLi attack via (&id).

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:N/C:P/I:P/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Hermit Project	Hermit

Configuration 1 [-]

cpe:2.3:a:hermit_project:hermit:*:*:*:*:*:wordpress:*:*

No data.

References

Link	Providers
https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-unauthenticated-sql-injection-sqli-vulnerability
https://wordpress.org/plugins/hermit/

History

No history.

MITRE

Status: PUBLISHED

Assigner: Patchstack

Published: 2022-04-28T16:20:29.169180Z

Updated: 2024-09-17T02:16:01.404Z

Reserved: 2022-04-18T00:00:00

Link: CVE-2022-29411

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-04-28T17:15:39.013

Modified: 2023-11-07T03:46:01.240

Link: CVE-2022-29411

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Hermit \u97f3\u4e50\u64ad\u653e\u5668 (WordPress plugin)", "vendor": "Mufeng", "versions": [{"lessThanOrEqual": "3.1.6", "status": "affected", "version": "<= 3.1.6", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Vulnerability discovered by Lenon Leite (Patchstack Alliance)"}], "datePublic": "2022-04-28T00:00:00", "descriptions": [{"lang": "en", "value": "SQL Injection (SQLi) vulnerability in Mufeng's Hermit \u97f3\u4e50\u64ad\u653e\u5668 plugin <= 3.1.6 on WordPress allows attackers to execute SQLi attack via (&id)."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 SQL Injection", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-04-28T16:20:29", "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://wordpress.org/plugins/hermit/"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-unauthenticated-sql-injection-sqli-vulnerability"}], "solutions": [{"lang": "en", "value": "Deactivate and delete. This plugin has been closed as of April 25, 2022 and is not available for download. This closure is temporary, pending a full review."}], "source": {"discovery": "EXTERNAL"}, "title": "WordPress Hermit \u97f3\u4e50\u64ad\u653e\u5668 plugin <= 3.1.6 - Unauthenticated SQL Injection SQLi) vulnerability", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "audit@patchstack.com", "DATE_PUBLIC": "2022-04-28T12:22:00.000Z", "ID": "CVE-2022-29411", "STATE": "PUBLIC", "TITLE": "WordPress Hermit \u97f3\u4e50\u64ad\u653e\u5668 plugin <= 3.1.6 - Unauthenticated SQL Injection SQLi) vulnerability"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Hermit \u97f3\u4e50\u64ad\u653e\u5668 (WordPress plugin)", "version": {"version_data": [{"version_affected": "<=", "version_name": "<= 3.1.6", "version_value": "3.1.6"}]}}]}, "vendor_name": "Mufeng"}]}}, "credit": [{"lang": "eng", "value": "Vulnerability discovered by Lenon Leite (Patchstack Alliance)"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SQL Injection (SQLi) vulnerability in Mufeng's Hermit \u97f3\u4e50\u64ad\u653e\u5668 plugin <= 3.1.6 on WordPress allows attackers to execute SQLi attack via (&id)."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-89 SQL Injection"}]}]}, "references": {"reference_data": [{"name": "https://wordpress.org/plugins/hermit/", "refsource": "CONFIRM", "url": "https://wordpress.org/plugins/hermit/"}, {"name": "https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-unauthenticated-sql-injection-sqli-vulnerability", "refsource": "CONFIRM", "url": "https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-unauthenticated-sql-injection-sqli-vulnerability"}]}, "solution": [{"lang": "en", "value": "Deactivate and delete. This plugin has been closed as of April 25, 2022 and is not available for download. This closure is temporary, pending a full review."}], "source": {"discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T06:17:55.305Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://wordpress.org/plugins/hermit/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-unauthenticated-sql-injection-sqli-vulnerability"}]}]}, "cveMetadata": {"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "assignerShortName": "Patchstack", "cveId": "CVE-2022-29411", "datePublished": "2022-04-28T16:20:29.169180Z", "dateReserved": "2022-04-18T00:00:00", "dateUpdated": "2024-09-17T02:16:01.404Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hermit_project:hermit:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "FF505CF1-AC04-4B35-843F-4AC1E14478B2", "versionEndIncluding": "3.1.6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SQL Injection (SQLi) vulnerability in Mufeng's Hermit \u97f3\u4e50\u64ad\u653e\u5668 plugin <= 3.1.6 on WordPress allows attackers to execute SQLi attack via (&id)."}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n SQL (SQLi) en el plugin Hermit ????? de Mufeng versiones anteriores a 3.1.6 incluy\u00e9ndola en WordPress, permite a atacantes ejecutar un ataque SQLi por medio de (&id)"}], "id": "CVE-2022-29411", "lastModified": "2023-11-07T03:46:01.240", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.7, "source": "audit@patchstack.com", "type": "Secondary"}]}, "published": "2022-04-28T17:15:39.013", "references": [{"source": "audit@patchstack.com", "tags": ["Third Party Advisory"], "url": "https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-unauthenticated-sql-injection-sqli-vulnerability"}, {"source": "audit@patchstack.com", "tags": ["Product", "Third Party Advisory"], "url": "https://wordpress.org/plugins/hermit/"}], "sourceIdentifier": "audit@patchstack.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "audit@patchstack.com", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-89"}], "source": "nvd@nist.gov", "type": "Secondary"}]}