CVE-2020-11738 : Security Advisory and Response

The Snap Creek Duplicator plugin for WordPress before 1.3.28 and Duplicator Pro before 3.8.7.1 are vulnerable to Directory Traversal attacks.

Understanding CVE-2020-11738

This CVE identifies a security vulnerability in the Snap Creek Duplicator plugin for WordPress and Duplicator Pro that allows Directory Traversal attacks.

What is CVE-2020-11738?

The vulnerability in the Snap Creek Duplicator plugin allows attackers to perform Directory Traversal by using '../' in the file parameter for duplicator_download or duplicator_init.

The Impact of CVE-2020-11738

The impact of this vulnerability is rated as HIGH with a CVSS base score of 7.5. It can lead to unauthorized access to sensitive files and data stored on the affected systems.

Technical Details of CVE-2020-11738

The technical details of this CVE provide insight into the vulnerability and its implications.

Vulnerability Description

The vulnerability allows attackers to traverse directories by manipulating the file parameter in specific plugin functions.

Affected Systems and Versions

Snap Creek Duplicator plugin before version 1.3.28 for WordPress
Duplicator Pro before version 3.8.7.1

Exploitation Mechanism

Attackers can exploit this vulnerability by inserting '../' in the file parameter of the duplicator_download or duplicator_init functions, enabling them to access files outside the intended directory structure.

Mitigation and Prevention

Protecting systems from CVE-2020-11738 requires immediate actions and long-term security practices.

Immediate Steps to Take

Update the Snap Creek Duplicator plugin and Duplicator Pro to versions 1.3.28 and 3.8.7.1, respectively.
Monitor system logs for any suspicious activities indicating a Directory Traversal attempt.

Long-Term Security Practices

Regularly audit and review file access permissions to prevent unauthorized access.
Implement web application firewalls to detect and block Directory Traversal attempts.

Patching and Updates

Stay informed about security updates for plugins and promptly apply patches to address known vulnerabilities.