QID 731166

Date Published: 2024-02-26

QID 731166: WordPress Affiliate-toolkit Plugin Server Side Request Forgery (SSRF) Vulnerability

The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it's affiliate-toolkit-starter/tools/atkp_imagereceiver.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URL's, including RFC1918 private addresses, leading to a Server Side Request Forgery (SSRF) issue.

Affected Version
affiliate-toolkit less than 3.4.3

QID Detection Logic (Un-Authenticated):
QID sends GET request to plugins/affiliate-toolkit-starter/tools/atkp_imagereceiver.php path, to check vulnerability.

On successful exploitation allowing unauthenticated visitors to make requests to arbitrary URL's

CVSS V3 rated as Critical - 9.8 severity.

CVSS V2 rated as High - 7.5 severity.

Solution

Vendor fixed issue in 3.4.3. Refer to advisory here for updates and patch information.

Vendor References

affiliate-toolkit - wpscan.com/vulnerability/39ed4934-3d91-4924-8acc-25759fef9e81/

CVEs related to QID 731166

CVE-2023-5877 |

Software Advisories

Advisory ID	Software	Component	Link
CVE-2023-5877			wpscan.com/vulnerability/39ed4934-3d91-4924-8acc-25759fef9e81/

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].