PT-2024-19276 · Phpmyfaq · Phpmyfaq

Pinkdraconian · Published 2024-02-05 · Updated 2024-02-12 · CVE-2024-22208

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 3.2.5

Description The 'sharing FAQ' functionality in phpMyFAQ allows any unauthenticated actor to misuse the application to send arbitrary emails to a large range of targets. The front-end of this functionality allows any phpMyFAQ articles to be shared with 5 email addresses, but the backend does not limit the number of email addresses that can be sent with a single request. An attacker can solve a single CAPTCHA and send thousands of emails at once, utilizing the target application's email server to send phishing messages. This can lead to the server being blacklisted, causing all emails to end up in spam, and can also result in reputational damages.

Recommendations For versions prior to 3.2.5, update to version 3.2.5 to resolve the issue. As a temporary workaround, consider restricting access to the 'sharing FAQ' functionality to prevent unauthenticated actors from sending arbitrary emails. Additionally, monitor email server logs for suspicious activity and consider implementing additional security measures to prevent phishing attacks.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-22208

GHSA-9HHF-XMCW-R3XG

Affected Products

Phpmyfaq

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22208.json · Exploit
• 🔥 https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-9hhf-xmcw-r3xg · Exploit
• https://github.com/thorsten/phpMyFAQ/commit/a34d94ab7b1be9256a9ef898f18ea6bfb63f6f1e · Patch
• https://osv.dev/vulnerability/CVE-2024-22208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22208 · Security Note
• https://osv.dev/vulnerability/GHSA-9hhf-xmcw-r3xg · Vendor Advisory
• https://github.com/thorsten/phpMyFAQ · Note
• https://twitter.com/CVEnew/status/1754608998874026017 · Twitter Post
• https://phpmyfaq.de/security/advisory-2024-02-05 · Note
• https://t.me/cvenotify/71141 · Telegram Post