PT-2024-1507 · WordPress · Web3

Vicent Ribas · Published 2024-01-17 · Updated 2024-10-08 · CVE-2023-6036

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Web3 WordPress plugin versions prior to 3.0.0

Description The issue is related to an authentication bypass due to incorrect authentication checking in the login flow. This is caused by vulnerabilities in the handle auth request and handle login request functions. An attacker can exploit this to log in as any existing user, including administrators, if they have access to the username. The vulnerability can be exploited by sending a specially crafted POST request.

Recommendations For versions prior to 3.0.0, update to version 3.0.0 or later to resolve the issue. As a temporary workaround, consider disabling the handle auth request and handle login request functions until a patch is available. Restrict access to the login module to minimize the risk of exploitation.

Exploit

Fix

Incorrect Authorization

Improper Authentication

Weakness Enumeration

CWE-863

CWE-287

Related Identifiers

BDU:2024-01017

CVE-2023-6036

Affected Products

Web3

References · 12

• 🔥 https://github.com/pctripsesp/CVE-2023-6036 · Exploit
• 🔥 https://wpscan.com/vulnerability/7f30ab20-805b-422c-a9a5-21d39c570ee4 · Exploit
• https://bdu.fstec.ru/vul/2024-01017 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-6036 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6036 · Vendor Advisory
• https://twitter.com/CVEnew/status/1757077018880127398 · Twitter Post
• https://t.me/cvenotify/71054 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1757099714326016199 · Twitter Post
• https://t.me/cybersecuritytechnologies/9891 · Telegram Post
• https://twitter.com/TheHackForce/status/1753383547396608156 · Twitter Post
• https://t.me/cvenotify/71080 · Telegram Post
• https://twitter.com/zerodayx1/status/1773799268014330244 · Twitter Post