PT-2023-6980 · WordPress · Eventon

Miguel Santareno · Published 2023-06-19 · Updated 2023-08-04 · CVE-2023-3219

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions EventON WordPress plugin versions prior to 2.1.2

Description The issue is related to the eventon ics download ajax action in the EventON WordPress plugin, where the event id parameter is not properly validated, allowing unauthorized access to post content, including unpublished or protected posts, by providing the numeric id of the post. This can be exploited by unauthenticated visitors. The vulnerability is also described as an error in handling user-controlled authorization keys, which can allow a remote attacker to gain unauthorized access to protected information.

Recommendations For versions prior to 2.1.2, update to version 2.1.2 or later to resolve the issue. As a temporary workaround, consider disabling the eventon ics download ajax action until a patch is available. Restrict access to the ics export functionality to minimize the risk of exploitation. Avoid using the event id parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

BDU:2023-07999

CVE-2023-3219

Affected Products

Eventon

References · 8

• 🔥 https://exploit-db.com/exploits/51659 · Exploit
• 🔥 https://wpscan.com/vulnerability/72d80887-0270-4987-9739-95b1a178c1fd · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-3219 · Security Note
• https://bdu.fstec.ru/vul/2023-07999 · Security Note
• https://osv.dev/vulnerability/CVE-2023-3219 · Vendor Advisory
• https://wordfence.com/threat-intel/vulnerabilities/detail/eventon-21-insecure-direct-object-reference-to-unauthorized-post-access · Note
• http://packetstormsecurity.com/files/173992/WordPress-EventON-Calendar-4.4-Insecure-Direct-Object-Reference.html · Note
• https://wordpress.org/plugins/eventon-lite · Note