9.8

CVE-2023-2987

Wordapp <= 1.6.0 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature

Wordapp <= 1.6.0 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature

The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wa_pdx_op_config_set' function in versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to the plugin to change the 'validation_token' in the plugin config, providing access to the plugin's remote control functionalities, such as creating an admin access URL, which can be used for privilege escalation.
Mögliche Gegenmaßnahme
Wordapp: Update to version 1.7.0, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wordapp ≫ Wordapp SwPlatformwordpress Version <= 1.5.0
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Wordapp
Version *-1.6.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.53% 0.403
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
security@wordfence.com 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/access.php#L28
Patch
https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/config.php#L59
Patch
https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/pdx.php#L64
Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/80440bfa-4a02-4441-bbdb-52d7dd065a9d?source=cve
Third Party Advisory
https://lana.report/publication/6e779e9a-e0f9-4102-9f0b-ad46e9c4533f/
https://plugins.trac.wordpress.org/changeset/3063322/wordapp
https://www.wordfence.com/threat-intel/vulnerabilities/id/80440bfa-4a02-4441-bbdb-52d7dd065a9d
Third Party Advisory