Vulnerabilities > CVE-2023-2996 - Unspecified vulnerability in Automattic Jetpack

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

automattic

NVD

Published: 2023-06-27

Updated: 2024-11-21

Summary

The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization.

Vulnerable Configurations

Part	Description	Count
Application	Automattic Automattic Jetpack 1.1 Automattic Jetpack 1.1.1 Automattic Jetpack 1.1.2 Automattic Jetpack 1.1.3 Automattic Jetpack 1.2 Automattic Jetpack 1.2.1 Automattic Jetpack 1.2.2 Automattic Jetpack 1.2.3 Automattic Jetpack 1.2.4 Automattic Jetpack 1.3 Automattic Jetpack 1.3.1 Automattic Jetpack 1.3.2 Automattic Jetpack 1.3.3 Automattic Jetpack 1.3.4 Automattic Jetpack 1.4 Automattic Jetpack 1.4.1 Automattic Jetpack 1.4.2 Automattic Jetpack 1.5 Automattic Jetpack 1.6 Automattic Jetpack 1.6.1 Automattic Jetpack 1.7 Automattic Jetpack 1.8 Automattic Jetpack 1.8.1 Automattic Jetpack 1.8.2 Automattic Jetpack 1.8.3 Automattic Jetpack 1.9 Automattic Jetpack 1.9.1 Automattic Jetpack 1.9.2 Automattic Jetpack 2.0 Automattic Jetpack 2.0.1 Automattic Jetpack 2.0.2 Automattic Jetpack 2.0.3 Automattic Jetpack 2.0.4 Automattic Jetpack 2.1 Automattic Jetpack 2.1.1 Automattic Jetpack 2.1.2 Automattic Jetpack 2.2 Automattic Jetpack 2.2.1 Automattic Jetpack 2.2.2 Automattic Jetpack 2.2.3 Automattic Jetpack 2.2.4 Automattic Jetpack 2.2.5 Automattic Jetpack 2.3 Automattic Jetpack 2.3.1 Automattic Jetpack 2.3.2 Automattic Jetpack 2.3.3 Automattic Jetpack 2.3.4 Automattic Jetpack 2.3.5 Automattic Jetpack 2.4 Automattic Jetpack 2.4.1 Automattic Jetpack 2.4.2 Automattic Jetpack 2.5 Automattic Jetpack 2.6 Automattic Jetpack 2.6.1 Automattic Jetpack 2.7 Automattic Jetpack 2.8 Automattic Jetpack 2.9 Automattic Jetpack 2.9.1 Automattic Jetpack 2.9.2 Automattic Jetpack 2.9.3 Automattic Jetpack 3.0 Automattic Jetpack 3.0.1 Automattic Jetpack 3.0.2 Automattic Jetpack 3.1 Automattic Jetpack 3.1.1 Automattic Jetpack 3.2 Automattic Jetpack 3.2.1 Automattic Jetpack 3.3 Automattic Jetpack 3.3.1 Automattic Jetpack 3.3.2 Automattic Jetpack 3.4 Automattic Jetpack 3.4.1 Automattic Jetpack 3.4.2 Automattic Jetpack 3.4.3 Automattic Jetpack 3.5 Automattic Jetpack 3.5.1 Automattic Jetpack 3.5.2 Automattic Jetpack 3.5.3 Automattic Jetpack 3.6 Automattic Jetpack 3.6.1 Automattic Jetpack 3.7 Automattic Jetpack 3.7.1 Automattic Jetpack 3.7.2 Automattic Jetpack 3.8.0 Automattic Jetpack 3.8.1 Automattic Jetpack 3.8.2 Automattic Jetpack 3.9.0 Automattic Jetpack 3.9.1 Automattic Jetpack 3.9.2 Automattic Jetpack 3.9.3 Automattic Jetpack 3.9.4 Automattic Jetpack 3.9.5 Automattic Jetpack 3.9.6 Automattic Jetpack 4.0.0 Automattic Jetpack 4.0.1 Automattic Jetpack 4.0.2 Automattic Jetpack 4.0.3 Automattic Jetpack 4.0.4 Automattic Jetpack 4.1.0 Automattic Jetpack 4.1.1 Automattic Jetpack 4.2 Automattic Jetpack 4.2.0 Automattic Jetpack 4.2.1 Automattic Jetpack 4.2.2 Automattic Jetpack 4.3.0 Automattic Jetpack 4.3.1 Automattic Jetpack 4.3.2 Automattic Jetpack 4.4 Automattic Jetpack 4.4.1 Automattic Jetpack 4.4.2 Automattic Jetpack 4.5 Automattic Jetpack 4.6 Automattic Jetpack 4.7 Automattic Jetpack 4.7.1 Automattic Jetpack 4.8 Automattic Jetpack 4.8.1 Automattic Jetpack 4.8.2 Automattic Jetpack 4.9 Automattic Jetpack 5.0 Automattic Jetpack 5.1 Automattic Jetpack 5.1.1 Automattic Jetpack 5.2 Automattic Jetpack 5.2.1 Automattic Jetpack 5.2.2 Automattic Jetpack 5.3 Automattic Jetpack 5.3.1 Automattic Jetpack 5.4 Automattic Jetpack 5.4.1 Automattic Jetpack 5.5 Automattic Jetpack 5.5.1 Automattic Jetpack 5.5.2 Automattic Jetpack 5.6 Automattic Jetpack 5.6.1 Automattic Jetpack 5.6.2 Automattic Jetpack 5.7 Automattic Jetpack 5.7.1 Automattic Jetpack 5.7.2 Automattic Jetpack 5.8 Automattic Jetpack 5.8.1 Automattic Jetpack 5.9 Automattic Jetpack 5.9.1 Automattic Jetpack 6.0 Automattic Jetpack 6.0.1 Automattic Jetpack 6.1 Automattic Jetpack 6.1.1 Automattic Jetpack 6.1.2 Automattic Jetpack 6.2 Automattic Jetpack 6.2.1 Automattic Jetpack 6.2.2 Automattic Jetpack 6.3 Automattic Jetpack 6.3.2 Automattic Jetpack 6.3.3 Automattic Jetpack 6.3.4 Automattic Jetpack 6.4 Automattic Jetpack 6.4.1 Automattic Jetpack 6.4.2 Automattic Jetpack 6.4.3 Automattic Jetpack 6.5 Automattic Jetpack 6.5.1 Automattic Jetpack 6.6 Automattic Jetpack 6.6.1 Automattic Jetpack 6.6.2 Automattic Jetpack 6.7 Automattic Jetpack 6.7.1 Automattic Jetpack 6.8 Automattic Jetpack 6.8.1 Automattic Jetpack 6.8.2 Automattic Jetpack 6.9 Automattic Jetpack 6.9.1 Automattic Jetpack 7.0 Automattic Jetpack 7.0.1 Automattic Jetpack 7.0.2 Automattic Jetpack 7.1 Automattic Jetpack 7.1.1 Automattic Jetpack 7.1.2 Automattic Jetpack 7.2 Automattic Jetpack 7.2.1 Automattic Jetpack 7.2.1.1 Automattic Jetpack 7.2.2 Automattic Jetpack 7.3 Automattic Jetpack 7.3.0 Automattic Jetpack 7.3.0.1 Automattic Jetpack 7.3.1 Automattic Jetpack 7.3.1.1 Automattic Jetpack 7.3.2 Automattic Jetpack 7.4 Automattic Jetpack 7.4.1 Automattic Jetpack 7.4.2 Automattic Jetpack 7.5 Automattic Jetpack 7.5.1 Automattic Jetpack 7.5.2 Automattic Jetpack 7.5.3 Automattic Jetpack 7.5.4 Automattic Jetpack 7.6 Automattic Jetpack 7.6.1 Automattic Jetpack 7.7 Automattic Jetpack 7.7.1 Automattic Jetpack 7.7.2 Automattic Jetpack 7.7.3 Automattic Jetpack 7.8 Automattic Jetpack 7.8.1 Automattic Jetpack 7.9 Automattic Jetpack 7.9.1 Automattic Jetpack 8.0 Automattic Jetpack 8.1 Automattic Jetpack 8.1.1 Automattic Jetpack 8.2 Automattic Jetpack 8.2.0.1 Automattic Jetpack 8.2.1 Automattic Jetpack 8.2.2 Automattic Jetpack 8.2.3 Automattic Jetpack 8.3 Automattic Jetpack 8.4 Automattic Jetpack 8.4.1 Automattic Jetpack 8.4.2 Automattic Jetpack 8.5 Automattic Jetpack 8.6 Automattic Jetpack 8.6.1 Automattic Jetpack 8.7 Automattic Jetpack 8.7.0.1 Automattic Jetpack 8.7.1 Automattic Jetpack 8.8 Automattic Jetpack 8.8.1 Automattic Jetpack 8.8.2 Automattic Jetpack 8.9 Automattic Jetpack 8.9.1 Automattic Jetpack 9.0 Automattic Jetpack 9.0.1 Automattic Jetpack 9.0.2 Automattic Jetpack 9.0.2.1 Automattic Jetpack 9.1 Automattic Jetpack 9.2 Automattic Jetpack 9.2.1 Automattic Jetpack 9.3 Automattic Jetpack 9.3.1 Automattic Jetpack 9.3.2 Automattic Jetpack 9.4 Automattic Jetpack 9.4.1 Automattic Jetpack 9.5 Automattic Jetpack 9.5.1 Automattic Jetpack 9.5.2 Automattic Jetpack 9.6 Automattic Jetpack 9.6.1 Automattic Jetpack 9.7 Automattic Jetpack 9.8 Automattic Jetpack 9.8.1 Automattic Jetpack 9.9 Automattic Jetpack 9.9.1 Automattic Jetpack 10.0 Automattic Jetpack 10.1 Automattic Jetpack 10.2 Automattic Jetpack 10.2.1 Automattic Jetpack 10.3 Automattic Jetpack 10.4 Automattic Jetpack 10.5 Automattic Jetpack 10.5.1 Automattic Jetpack 10.6 Automattic Jetpack 10.7 Automattic Jetpack 10.8 Automattic Jetpack 10.9 Automattic Jetpack 10.9.1 Automattic Jetpack 11.0 Automattic Jetpack 11.1 Automattic Jetpack 11.2 Automattic Jetpack 11.3 Automattic Jetpack 11.3.1 Automattic Jetpack 11.3.2 Automattic Jetpack 11.4 Automattic Jetpack 11.5 Automattic Jetpack 11.6 Automattic Jetpack 11.7 Automattic Jetpack 11.7.1 Automattic Jetpack 11.8 Automattic Jetpack 11.8.4 Automattic Jetpack 11.9 Automattic Jetpack 11.9.1 Automattic Jetpack 12.0 Automattic Jetpack 12.1	278

Summary

Vulnerable Configurations

References