PT-2023-32453 · WordPress · Wpb Show Core

Mohamed Abdelhady · Publicado 2023-11-27 · Atualizado 2023-12-01 · CVE-2023-5974

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WPB Show Core WordPress plugin versions through 2.2

Description The issue concerns server-side request forgery (SSRF) via the path parameter. This allows for potentially malicious requests to be made to the server.

Recommendations For WPB Show Core WordPress plugin versions through 2.2, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the path parameter to minimize the risk of exploitation.

Exploit

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2023-5974

Produtos afetados

Wpb Show Core

Referências · 4

• 🔥 https://wpscan.com/vulnerability/c0136057-f420-4fe7-a147-ecbec7e7a9b5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-5974 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-5974 · Aviso do Fabricante
• https://t.me/cvenotify/61930 · Publicação no Telegram