PT-2024-20107 · Unknown · Tablepress

Isacaya · Published 2024-01-30 · Updated 2024-02-07 · CVE-2024-23825

Positive Technologies (AI Summary)

CVSS v3.1

3.0

Low

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TablePress versions prior to 2.2.5

Description The issue arises from insufficient filtering of user input for URLs used in external HTTP requests for importing tables. This can lead to sending requests to unintended network locations and receiving responses. In cloud environments like AWS, an attacker could potentially make GET requests to the instance's metadata REST API, leading to exposure of internal data, including credentials, if the instance's configuration is insecure.

Recommendations For versions prior to 2.2.5, update to version 2.2.5 to resolve the issue. As a temporary workaround, consider restricting user input for table import URLs to minimize the risk of exploitation.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-23825

GHSA-X8RF-C8X6-MRPG

Affected Products

Tablepress

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23825.json · Exploit
• 🔥 https://github.com/TablePress/TablePress/security/advisories/GHSA-x8rf-c8x6-mrpg · Exploit
• https://github.com/TablePress/TablePress/commit/62aab50e7a9c486caaeff26dff4dc01e059ecb91 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-23825 · Security Note
• https://osv.dev/vulnerability/CVE-2024-23825 · Vendor Advisory
• https://twitter.com/RedPacketSec/status/1754083407557013595 · Twitter Post
• https://twitter.com/RsSI47041968/status/1755245319099707577 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1752414029681741857 · Twitter Post
• https://twitter.com/CVEnew/status/1752371322301067729 · Twitter Post