CVE-2023-2599: CSRF
First published: Fri Jun 09 2023(Updated: )
The Active Directory Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 4.1.4 due to missing nonce verification on the get_users function and insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to cause resource exhaustion via a forged request granted they can trick an administrator into performing an action such as clicking on a link.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MiniOrange Active Directory Integration / LDAP Integration | <=4.1.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://plugins.trac.wordpress.org/browser/ldap-login-for-intranet-sites/trunk/class-mo-ldap-user-auth-reports.php?rev=2859403#L64
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2910898%40ldap-login-for-intranet-sites%2Ftrunk&old=2903294%40ldap-login-for-intranet-sites%2Ftrunk&sfp_email=&sfph_mail=#file5
- https://www.wordfence.com/threat-intel/vulnerabilities/id/74089b16-76fa-4654-9007-3f0c2e894894?source=cve
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-2599.
What is the severity of CVE-2023-2599?
The severity of CVE-2023-2599 is medium.
How does the Active Directory Integration plugin for WordPress become vulnerable?
The Active Directory Integration plugin for WordPress becomes vulnerable due to missing nonce verification on the get_users function and insufficient escaping on the orderby and order parameters.
What is the affected software for CVE-2023-2599?
The affected software for CVE-2023-2599 is Miniorange Active Directory Integration / Ldap Integration plugin for WordPress versions up to, and including, 4.1.4.
How can I fix the vulnerability in the Active Directory Integration plugin?
To fix the vulnerability in the Active Directory Integration plugin, update to a version later than 4.1.4.
- agent/weakness
- agent/type
- agent/remedy
- agent/softwarecombine
- agent/author
- agent/severity
- agent/references
- agent/event
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/miniorange
- canonical/miniorange active directory integration / ldap integration
- version/miniorange active directory integration / ldap integration/4.1.4