CVE-2023-2897: Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass
The Brizy Page Builder plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.4.18. This is due to an implicit trust of user-supplied IP addresses in an 'X-Forwarded-For' HTTP header for the purpose of validating allowed IP addresses against a Maintenance Mode whitelist. Supplying a whitelisted IP address within the 'X-Forwarded-For' header allows maintenance mode to be bypassed and may result in the disclosure of potentially sensitive information or allow access to restricted functionality.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-2897?
CVE-2023-2897 is a vulnerability in the Brizy Page Builder plugin for WordPress that allows for IP Address Spoofing.
What is the severity of CVE-2023-2897?
CVE-2023-2897 has a severity rating of medium with a score of 5.3.
How does CVE-2023-2897 affect the Brizy Page Builder plugin?
CVE-2023-2897 affects versions up to and including 2.4.18 of the Brizy Page Builder plugin for WordPress.
How can IP Address Spoofing be exploited in CVE-2023-2897?
In CVE-2023-2897, an attacker can manipulate the 'X-Forwarded-For' HTTP header to spoof their IP address and bypass IP address validation in Maintenance Mode.
Is there a fix available for CVE-2023-2897?
Yes, the fix for CVE-2023-2897 is included in version 2.4.19 or later of the Brizy Page Builder plugin for WordPress.