Arbitrary File Write in Breeze Cache WordPress Plugin

Executive Summary

The Breeze Cache WordPress plugin before version 2.5.13 has a vulnerability where it does not sanitize a value from the request before using it to build file paths for cached content. This allows unauthenticated attackers to create files at arbitrary locations on the server outside the intended cache directory.

Useful 0 Not Useful 0

Detection Guidance

Check if the Breeze Cache WordPress plugin version is below 2.5.13. Look for unexpected files in cache directories or arbitrary server locations. Monitor for unusual file creation or disk usage spikes.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to create files anywhere on the server, consume disk space, and potentially overwrite existing site asset files if the asset optimization feature is enabled. On Windows hosts, attackers can serve created files publicly and delete existing files of the same type at chosen locations.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized file creation or modification on the server, potentially exposing sensitive data. For GDPR, this may result in unauthorized access to personal data. For HIPAA, it could compromise protected health information if files are created or overwritten inappropriately.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Breeze Cache plugin to version 2.5.13 or later immediately. Disable the asset optimization feature if enabled. Review server files for unauthorized changes and restrict write permissions.

Useful 0 Not Useful 0