PT-2023-19215 · Unknown · Shortcodes Ultimate+1

Rafie Muhammad · Publicado 2023-11-13 · Atualizado 2023-11-17 · CVE-2023-23800

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions WP Shortcodes Plugin — Shortcodes Ultimate versions 5.12.6 and earlier

Description A Server-Side Request Forgery (SSRF) issue affects the WP Shortcodes Plugin — Shortcodes Ultimate. This allows an attacker to forge requests from the server, potentially leading to unauthorized access to internal resources or sensitive data.

Recommendations For versions 5.12.6 and earlier, update to a version later than 5.12.6 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific issue.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2023-23800

Produtos afetados

Shortcodes Ultimate

Wp Shortcodes Plugin

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-23800 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-23800 · Aviso do Fabricante
• https://t.me/cvenotify/60635 · Publicação no Telegram
• https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Nota