PT-2023-22057 · WordPress · Brizy – Page Builder

Alex Thomas · Published 2023-06-09 · Updated 2023-06-16 · CVE-2023-2897

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brizy Page Builder plugin for WordPress versions up to, and including, 2.4.18

Description The issue arises from an implicit trust of user-supplied IP addresses in the X-Forwarded-For HTTP header, which is used to validate allowed IP addresses against a Maintenance Mode whitelist. By supplying a whitelisted IP address within the X-Forwarded-For header, an attacker can bypass maintenance mode, potentially disclosing sensitive information or gaining access to restricted functionality.

Recommendations For versions up to, and including, 2.4.18, consider disabling the Maintenance Mode whitelist until a patch is available to prevent IP address spoofing. Restrict access to the X-Forwarded-For HTTP header to minimize the risk of exploitation. Update to a version later than 2.4.18 when available.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

CWE-348

Related Identifiers

CVE-2023-2897

Affected Products

Brizy – Page Builder

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-2897 · Security Note
• https://osv.dev/vulnerability/CVE-2023-2897 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset/2919443/brizy · Patch
• https://wordfence.com/threat-intel/vulnerabilities/id/ae342dd9-2f5f-4356-8fb4-9a3e5f4f8316?source=cve · Note
• https://t.me/cvenotify/52024 · Telegram Post
• https://t.me/cvenotify/52447 · Telegram Post