PT-2023-19128 · WordPress · Wpgraphql

Ravi Dharmawan · Publicado 2023-06-30 · Atualizado 2023-12-20 · CVE-2023-23684

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WPGraphQL versions 1.14.5 and earlier

Description A Server-Side Request Forgery (SSRF) issue affects WPGraphQL, allowing authenticated users with media upload capabilities to execute the createMediaItem mutation and potentially gain unwarranted access to the server by passing executable paths in the filePath argument.

Recommendations For WPGraphQL versions 1.14.5 and earlier, update to WPGraphQL v1.14.6 or newer to resolve the issue. If updating to v1.14.6 or higher is not possible, add a filter to the graphql pre resolve field function in functions.php to override the vulnerable createMediaItem mutation resolver, ensuring that only allowed protocols (https, http, file) are used and the file type is validated.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2023-23684

GHSA-CFH4-7WQ9-6PGG

Produtos afetados

Wpgraphql

Referências · 9

• https://github.com/wp-graphql/wp-graphql/pull/2840 · Nota
• https://github.com/wp-graphql/wp-graphql/releases/tag/v1.14.6 · Nota
• https://github.com/wp-graphql/wp-graphql/security/advisories/GHSA-cfh4-7wq9-6pgg · Nota
• https://github.com/wp-graphql/wp-graphql · Nota
• https://osv.dev/vulnerability/GHSA-cfh4-7wq9-6pgg · Aviso do Fabricante
• https://t.me/cvenotify/60621 · Publicação no Telegram
• https://patchstack.com/database/vulnerability/wp-graphql/wordpress-wp-graphql-plugin-1-14-5-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-23684 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-23684 · Aviso do Fabricante