PT-2023-16671 · WordPress · The Shield Security

Ram + 1 · Publicado 2023-06-09 · Atualizado 2023-06-15 · CVE-2023-0992

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions The Shield Security plugin for WordPress versions up to, and including, 17.0.17

Description The issue allows unauthenticated attackers to inject arbitrary web scripts in pages via the User-Agent header, which will execute whenever a user accesses an injected page. This is a stored Cross-Site Scripting issue.

Recommendations For versions up to, and including, 17.0.17, consider restricting access to the User-Agent header to minimize the risk of exploitation until a patch is available. As a temporary workaround, monitor user access logs closely for suspicious activity related to injected pages.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-0992

Produtos afetados

The Shield Security

Referências · 8

• https://t.me/cibsecurity/65089 · Publicação no Telegram
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2883864%40wp-simple-firewall%2Ftrunk&old=2883536%40wp-simple-firewall%2Ftrunk&sfp_email=&sfph_mail= · Correção
• https://t.me/cvenotify/52347 · Publicação no Telegram
• https://wordfence.com/blog/2023/04/multiple-vulnerabilities-patched-in-shield-security · Nota
• https://wordfence.com/threat-intel/vulnerabilities/id/162dff28-94ea-4a47-a6cb-a13317cf1a04?source=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-0992 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-0992 · Aviso do Fabricante
• https://wordpress.org/plugins/wp-simple-firewall/#developers · Nota