PT-2023-30174 · Unknown · Group-Office

Asesidaa · Published 2023-11-07 · Updated 2023-11-14 · CVE-2023-46730

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Group-Office versions prior to 6.8.15 Group-Office versions prior to 6.7.54 Group-Office versions prior to 6.6.177

Description The issue is related to a full Server-Side Request Forgery (SSRF) vulnerability in the "/api/upload.php" endpoint. This endpoint does not filter URLs, allowing a malicious user to cause the server to make resource requests to untrusted domains. Protocols like "file://" can also be used to access the server disk. The request result can then be retrieved using "/api/download.php".

Recommendations For versions prior to 6.8.15, upgrade to version 6.8.15 or later. For versions prior to 6.7.54, upgrade to version 6.7.54 or later. For versions prior to 6.6.177, upgrade to version 6.6.177 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2023-46730

GHSA-VW6C-H82W-MVFV

Affected Products

Group-Office

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46730.json · Exploit
• 🔥 https://github.com/Intermesh/groupoffice/security/advisories/GHSA-vw6c-h82w-mvfv · Exploit
• https://github.com/Intermesh/groupoffice/commit/99205535e8cec6592fd7f1469837926f27c72d50 · Patch
• https://osv.dev/vulnerability/CVE-2023-46730 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46730 · Security Note