8.8

CVE-2023-1977

Exploit

Booking Manager < 2.0.29 - Subscriber+ SSRF

Booking Manager <= 2.0.28 - Authenticated (Subscriber+) Server-Side Request Forgery

The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.
Mögliche Gegenmaßnahme
Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar: Update to version 2.0.29, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oplugins ≫ Booking Manager SwPlatformwordpress Version < 2.0.29
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar
Version *-2.0.28
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.82% 0.525
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://wpscan.com/vulnerability/842f3b1f-395a-4ea2-b7df-a36f70e8c790
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/a9ee709d-6590-4c07-9788-6150733c1691
Third Party Advisory