PT-2023-19943 · Nginx+1 · Nginx+1

Spyata · Published 2023-02-15 · Updated 2023-02-24 · CVE-2023-25156

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Kiwi TCMS versions prior to 12.0

Description The issue concerns the lack of rate limits in Kiwi TCMS, making it easier for attackers to attempt brute-force attacks against the login page.

Recommendations For versions prior to 12.0, upgrade to v12.0 or later to receive a patch. As a temporary workaround, consider installing and configuring a rate-limiting proxy, such as nginx, in front of Kiwi TCMS.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Allocation of Resources Without Limits

Weakness Enumeration

CWE-307

CWE-770

Related Identifiers

CVE-2023-25156

GHSA-7968-H4M4-GHM9

Affected Products

Kiwi Tcms

Nginx

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25156.json · Exploit
• https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7968-h4m4-ghm9 · Vendor Advisory
• https://github.com/kiwitcms/Kiwi/commit/0ed213fa0ddb7a6dc77e3c3b99e8fc90ccdaf46f · Patch
• https://osv.dev/vulnerability/GHSA-7968-h4m4-ghm9 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-25156 · Security Note
• https://osv.dev/vulnerability/CVE-2023-25156 · Vendor Advisory
• https://github.com/kiwitcms/Kiwi · Note
• https://huntr.dev/bounties/2b1a9be9-45e9-490b-8de0-26a492e79795 · Note
• https://kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120 · Note
• https://t.me/cibsecurity/58241 · Telegram Post