PT-2018-15030 · Interspire · Interspire Email Marketer

Published 2018-11-28 · Updated 2018-12-20 · CVE-2018-19651

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Interspire Email Marketer versions prior to 6.1.7

Description The issue allows for Server Side Request Forgery (SSRF) via a "what=importurl&url=" request with an http or https URL to the "admin/functions/remote.php" endpoint. This also enables reading local files using a "file:" URL.

Recommendations For versions prior to 6.1.7, update to version 6.1.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the "admin/functions/remote.php" endpoint to minimize the risk of exploitation. Avoid using the url parameter in the affected endpoint until the issue is resolved.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2018-19651

Affected Products

Interspire Email Marketer

References · 4

• 🔥 https://medium.com/@namhb/ssrf-to-lfi-in-interspire-email-marketer-698a748462a9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19651 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19651 · Vendor Advisory
• https://medium.com/%40namhb/ssrf-to-lfi-in-interspire-email-marketer-698a748462a9 · Note