8.8

CVE-2023-1977

Exploit

Booking Manager <= 2.0.28 - Authenticated (Subscriber+) Server-Side Request Forgery

The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.
Mögliche Gegenmaßnahme
Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar: Update to version 2.0.29, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar
Version *-2.0.28
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oplugins ≫ Booking Manager SwPlatformwordpress Version < 2.0.29
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.435
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.