The Simple Job Board plugin for WordPress is a widely used tool that allows website owners to manage job postings, applications, and resumes efficiently. It provides a user-friendly interface for job seekers to submit their resumes, which are stored securely for employer review. This plugin is popular among businesses of all sizes due to its ease of installation and robust features, streamlining the hiring process significantly.
CVE-2020-35749 is a directory traversal vulnerability found in the class-simple_job_board_resume_download_handler.php file in versions 2.9.3 and earlier. This vulnerability arises from insufficient input validation, allowing attackers to manipulate file paths and access files outside the intended directory. The flaw is exploited by passing a crafted value to the sjb_file parameter.
The vulnerable endpoint is wp-admin/post.php, where the sjb_file parameter is used to specify the file to download. By injecting path traversal sequences like ../, an attacker can read arbitrary files on the server, such as configuration files containing database credentials or sensitive user data. This attack requires no authentication, making it accessible to remote attackers.
If exploited, an attacker could gain unauthorized access to sensitive information, including WordPress configuration files (wp-config.php), database credentials, and other confidential data. This could lead to further compromise of the website, data breaches, or even full server takeover. The CVSS score of 7.7 highlights the high severity of this vulnerability.
- Update the Simple Job Board plugin to version 2.9.4 or later, which patches the directory traversal vulnerability.
- Implement input validation and sanitization for the sjb_file parameter to prevent path traversal attacks.
- Restrict file download functionality to only allow access to specific directories, such as the uploads folder.
- Use a web application firewall (WAF) to block malicious requests containing path traversal sequences.
- Regularly monitor server logs for suspicious activity, such as attempts to access files outside the intended directory.
- Apply the principle of least privilege to file permissions, ensuring that web server processes have minimal access to sensitive files.
- Conduct regular security scans using tools like S4E to detect and remediate vulnerabilities promptly.
- Educate administrators about the risks of directory traversal and the importance of keeping plugins updated.
Get AI-powered remediation steps tailored to your asset.
Try AI Solutions →