CVE-2024-2098

The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protectMediaLibrary' function in all versions up to, and including, 3.2.89. This makes it possible for unauthenticated attackers to download password-protected files.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://plugins.trac.wordpress.org/changeset/3072712/download-manager	Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/1301c8af-d81a-40f1-96fa-e8252309d8a4?source=cve	Third Party Advisory
https://plugins.trac.wordpress.org/changeset/3072712/download-manager	Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/1301c8af-d81a-40f1-96fa-e8252309d8a4?source=cve	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:w3eden:download_manager:*:*:*:*:free:wordpress:*:*

History

No history.

Information

Published : 2024-06-13 06:15

Updated : 2025-03-21 19:16

NVD link : CVE-2024-2098

Mitre link : CVE-2024-2098

CVE.ORG link : CVE-2024-2098

JSON object : View

Products Affected

w3eden

download_manager

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2024-2098", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-06-13T06:15:09.453", "references": [{"url": "https://plugins.trac.wordpress.org/changeset/3072712/download-manager", "tags": ["Patch"], "source": "[email protected]"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1301c8af-d81a-40f1-96fa-e8252309d8a4?source=cve", "tags": ["Third Party Advisory"], "source": "[email protected]"}, {"url": "https://plugins.trac.wordpress.org/changeset/3072712/download-manager", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1301c8af-d81a-40f1-96fa-e8252309d8a4?source=cve", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protectMediaLibrary' function in all versions up to, and including, 3.2.89. This makes it possible for unauthenticated attackers to download password-protected files."}, {"lang": "es", "value": "El complemento Download Manager para WordPress es vulnerable al acceso no autorizado a los datos debido a una verificaci\u00f3n de autorizaci\u00f3n incorrecta en la funci\u00f3n 'protectMediaLibrary' en todas las versiones hasta la 3.2.89 incluida. Esto hace posible que atacantes no autenticados descarguen archivos protegidos con contrase\u00f1a."}], "lastModified": "2025-03-21T19:16:48.597", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:w3eden:download_manager:*:*:*:*:free:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "58C81973-4610-407B-A1D8-5F63D9A3D062", "versionEndExcluding": "3.2.90"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}