CVE-2017-11658

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gist.github.com/Shinkurt/157dbb3767c9489f3d754f79b183a890Exploit, Third Party Advisory
https://wp-rocket.me/changelogRelease Notes, Vendor Advisory
https://wpvulndb.com/vulnerabilities/8872Third Party Advisory, VDB Entry
https://gist.github.com/Shinkurt/157dbb3767c9489f3d754f79b183a890Exploit, Third Party Advisory
https://wp-rocket.me/changelogRelease Notes, Vendor Advisory
https://wpvulndb.com/vulnerabilities/8872Third Party Advisory, VDB Entry

Timeline

Published: Jul 26, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-116617.5The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application CVE-2017-116627.5The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a CVE-2017-116636.5The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application CVE-2017-116646.5The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application CVE-2017-116657.5The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmen CVE-2017-116666.1Cross-site scripting (XSS) vulnerability in js/ViewerPanel.js in the file previewer plugin in Kopano WebApp versions 3.3.0 and earlier allow CVE-2017-116678.1OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitel CVE-2017-116687.5An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing CVE-2017-116697.5An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing CVE-2017-116707.5A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extrac CVE-2017-116714.0Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 befor CVE-2017-116727.8The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the op