PT-2023-19957 · Kiwi Tcms · Kiwi Tcms

Ahmed Rabea + 1 · Publicado 2023-02-15 · Atualizado 2023-02-24 · CVE-2023-25171

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Kiwi TCMS versions prior to 12.0

Description The issue allows for easier denial-of-service attacks against the Password reset page due to the lack of rate limits. An attacker could send a large number of emails if they know the email addresses of users in Kiwi TCMS, potentially straining SMTP resources.

Recommendations For versions prior to 12.0, upgrade to v12.0 or later to receive a patch. As a temporary workaround, consider installing and configuring a rate-limiting proxy in front of Kiwi TCMS. Additionally, configure rate limits on the email server when possible to minimize the risk of exploitation.

Exploit

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2023-25171

GHSA-7J9H-3JXF-3VRF

Produtos afetados

Kiwi Tcms

Referências · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25171.json · Exploit
• https://github.com/kiwitcms/Kiwi · Nota
• https://github.com/kiwitcms/Kiwi/commit/761305d04f5910ba14cc04d1255a8f1afdbb87f3 · Correção
• https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7j9h-3jxf-3vrf · Aviso do Fabricante
• https://kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-25171 · Nota de Segurança
• https://huntr.dev/bounties/3b712cb6-3fa3-4f71-8562-7a7016c6262e · Nota
• https://osv.dev/vulnerability/GHSA-7j9h-3jxf-3vrf · Aviso do Fabricante
• https://t.me/cibsecurity/58244 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-25171 · Aviso do Fabricante