PT-2023-30174 · Unknown · Group-Office

Asesidaa · Publicado 2023-11-07 · Atualizado 2023-11-14 · CVE-2023-46730

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Group-Office versions prior to 6.8.15 Group-Office versions prior to 6.7.54 Group-Office versions prior to 6.6.177

Description The issue is related to a full Server-Side Request Forgery (SSRF) vulnerability in the "/api/upload.php" endpoint. This endpoint does not filter URLs, allowing a malicious user to cause the server to make resource requests to untrusted domains. Protocols like "file://" can also be used to access the server disk. The request result can then be retrieved using "/api/download.php".

Recommendations For versions prior to 6.8.15, upgrade to version 6.8.15 or later. For versions prior to 6.7.54, upgrade to version 6.7.54 or later. For versions prior to 6.6.177, upgrade to version 6.6.177 or later.

Exploit

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2023-46730

GHSA-VW6C-H82W-MVFV

Produtos afetados

Group-Office

Referências · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46730.json · Exploit
• 🔥 https://github.com/Intermesh/groupoffice/security/advisories/GHSA-vw6c-h82w-mvfv · Exploit
• https://github.com/Intermesh/groupoffice/commit/99205535e8cec6592fd7f1469837926f27c72d50 · Correção
• https://osv.dev/vulnerability/CVE-2023-46730 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-46730 · Nota de Segurança