Description

CVE-2024-35750 is an SQL Injection vulnerability in wpdevart Responsive Image Gallery, Gallery Album versions n/a through 2.0.3. This vulnerability allows attackers to execute arbitrary SQL commands on the vulnerable system, potentially leading to data theft, unauthorized access, or system compromise. The CVSS score of 8.5 indicates a high severity, while the SVRS of 34 suggests a moderate risk.

Key Insights

• Exploit Status: Active exploits have been published, indicating that attackers are actively exploiting this vulnerability.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has warned of this vulnerability, calling for immediate and necessary measures.
• Threat Actors/APT Groups: No specific threat actors or APT groups have been identified as actively exploiting this vulnerability.
• In the Wild: The vulnerability is actively exploited by hackers, posing a significant threat to organizations using the affected software.

Mitigation Strategies

• Update Software: Install the latest security updates from wpdevart to patch the vulnerability.
• Use Input Validation: Implement robust input validation mechanisms to prevent malicious SQL queries from being executed.
• Use a Web Application Firewall (WAF): Deploy a WAF to block malicious traffic and protect against SQL injection attacks.
• Monitor for Suspicious Activity: Regularly monitor logs and security alerts for any suspicious activity that may indicate an SQL injection attack.

Additional Information

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.