CVE-2017-7323: High severity MODx MODX Revolution vulnerability
The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier use http://rest.modx.com by default, which allows man-in-the-middle attackers to spoof servers and trigger the execution of arbitrary code by leveraging the lack of the HTTPS protection mechanism.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In MODX Revolution 2.5.4-pl and earlier, ensure that update and package-installation requests to rest.modx.com are protected with HTTPS (do not use the default plain HTTP endpoint) to prevent man-in-the-middle spoofing and arbitrary code execution.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7323?
CVE-2017-7323 is considered a moderate severity vulnerability due to its potential for man-in-the-middle attacks.
How do I fix CVE-2017-7323?
To fix CVE-2017-7323, upgrade MODX Revolution to a version later than 2.5.4 that utilizes HTTPS.
What software versions are affected by CVE-2017-7323?
CVE-2017-7323 affects MODX Revolution versions 2.5.4-pl and earlier.
What type of attacks can be executed using CVE-2017-7323?
CVE-2017-7323 allows attackers to perform man-in-the-middle attacks, potentially leading to arbitrary code execution.
Is HTTPS required to mitigate CVE-2017-7323?
Yes, implementing HTTPS is critical to mitigate the vulnerabilities exploited by CVE-2017-7323.