Acadlix LMSに任意ファイル削除の脆弱性、1.1.9以前が対象
Summary
WordPressプラグインのAcadlix LMS 1.1.9以前に、サーバー上のファイルを削除され、サイトの乗っ取りにつながる脆弱性があります。ログイン不要に近い条件で悪用されうるため、導入サイトは版を確認し、修正版へ更新してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
WordPressプラグインのAcadlix LMS 1.1.9以前に、サーバー上のファイルを削除され、サイトの乗っ取りにつながる脆弱性があります。ログイン不要に近い条件で悪用されうるため、導入サイトは版を確認し、修正版へ更新してください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| acadlix | Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress |
≤ 1.1.9 |
— |
Original description The description as published by the source.
The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the post_delete_assessment_file_by_id function in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The route's permission callback only verifies a generic wp_rest nonce that the plugin itself emits inside the public acadlixOptions JavaScript object on every frontend page, effectively reducing the authentication requirement to unauthenticated.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory