CVE-2018-25325
HighSummary
Woocommerce CSV Importer version 3.3.6 contains a path traversal vulnerability that allows registered users to delete arbitrary files by submitting unescaped filenames through the delete_export_file AJAX action. Attackers can craft POST requests with directory traversal sequences in the filename parameter.
Risk Assessment
This vulnerability may lead to the deletion of sensitive files like wp-config.php, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update Woocommerce CSV Importer to the latest version to mitigate this vulnerability and implement appropriate security measures, such as restricting user permissions.
Original NVD description (English source)
Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered user to delete arbitrary files by submitting unescaped filenames through the delete_export_file AJAX action. Attackers can craft POST requests with directory traversal sequences in the filename parameter to delete sensitive files like wp-config.php outside the intended export directory.