PT-2023-19957 · Kiwi Tcms · Kiwi Tcms

Ahmed Rabea + 1 · Published 2023-02-15 · Updated 2023-02-24 · CVE-2023-25171

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Kiwi TCMS versions prior to 12.0

Description The issue allows for easier denial-of-service attacks against the Password reset page due to the lack of rate limits. An attacker could send a large number of emails if they know the email addresses of users in Kiwi TCMS, potentially straining SMTP resources.

Recommendations For versions prior to 12.0, upgrade to v12.0 or later to receive a patch. As a temporary workaround, consider installing and configuring a rate-limiting proxy in front of Kiwi TCMS. Additionally, configure rate limits on the email server when possible to minimize the risk of exploitation.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2023-25171

GHSA-7J9H-3JXF-3VRF

Affected Products

Kiwi Tcms

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25171.json · Exploit
• https://github.com/kiwitcms/Kiwi/commit/761305d04f5910ba14cc04d1255a8f1afdbb87f3 · Patch
• https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7j9h-3jxf-3vrf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-25171 · Security Note
• https://osv.dev/vulnerability/GHSA-7j9h-3jxf-3vrf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-25171 · Vendor Advisory
• https://github.com/kiwitcms/Kiwi · Note
• https://kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120 · Note
• https://huntr.dev/bounties/3b712cb6-3fa3-4f71-8562-7a7016c6262e · Note
• https://t.me/cibsecurity/58244 · Telegram Post