The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it's affiliate-toolkit-starter/tools/atkp_imagereceiver.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URL's, including RFC1918 private addresses, leading to a Server Side Request Forgery (SSRF) issue.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/39ed4934-3d91-4924-8acc-25759fef9e81 | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/39ed4934-3d91-4924-8acc-25759fef9e81 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 08:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/39ed4934-3d91-4924-8acc-25759fef9e81 - Exploit, Third Party Advisory |
08 Jan 2024, 17:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/39ed4934-3d91-4924-8acc-25759fef9e81 - Exploit, Third Party Advisory | |
| Summary | (es) El complemento affiliate-toolkit de WordPress anterior a 3.4.3 carece de autorización y autenticación para solicitudes a su endpoint afiliado-toolkit-starter/tools/atkp_imagereceiver.php, lo que permite a visitantes no autenticados realizar solicitudes a URL arbitrarias, incluidas direcciones privadas RFC1918, lo que genera un problema de Server Side Request Forgery (SSRF). | |
| CPE | cpe:2.3:a:servit:affiliate-toolkit:*:*:*:*:*:wordpress:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-862 | |
| First Time |
Servit affiliate-toolkit
Servit |
02 Jan 2024, 13:47
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
01 Jan 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-01 15:15
Updated : 2024-11-21 08:42
NVD link : CVE-2023-5877
Mitre link : CVE-2023-5877
CVE.ORG link : CVE-2023-5877
JSON object : View
Products Affected
servit
- affiliate-toolkit
CWE
CWE-862
Missing Authorization