Vulnerabilities > CVE-2024-0842 - Excessive Iteration vulnerability in Softaculous Backuply

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

softaculous

CWE-834

NVD

Published: 2024-02-09

Updated: 2024-02-15

Summary

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.5. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.

Vulnerable Configurations

Part	Description	Count
Application	Softaculous Softaculous Backuply - Softaculous Backuply 1.0.0 Softaculous Backuply 1.0.1 Softaculous Backuply 1.0.2 Softaculous Backuply 1.0.3 Softaculous Backuply 1.0.4 Softaculous Backuply 1.0.5 Softaculous Backuply 1.0.6 Softaculous Backuply 1.0.7 Softaculous Backuply 1.0.8 Softaculous Backuply 1.0.9 Softaculous Backuply 1.1.0 Softaculous Backuply 1.1.1 Softaculous Backuply 1.1.2 Softaculous Backuply 1.1.3 Softaculous Backuply 1.1.4 Softaculous Backuply 1.1.5 Softaculous Backuply 1.1.6 Softaculous Backuply 1.1.7 Softaculous Backuply 1.1.8 Softaculous Backuply 1.1.9 Softaculous Backuply 1.2.0 Softaculous Backuply 1.2.1 Softaculous Backuply 1.2.2 Softaculous Backuply 1.2.3 Softaculous Backuply 1.2.4 Softaculous Backuply 1.2.5	27

Common Weakness Enumeration (CWE)

CWE-834 - Excessive Iteration

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References