CVE-2023-2496
Published: 24 May 2023
Summary
CVE-2023-2496 is a high-severity Improper Authorization (CWE-285) vulnerability in Granthweb Go Pricing. Its CVSS base score is 7.1 (High).
Operationally, ranked in the top 9.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
The Go Pricing WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads in versions up to and including 3.3.19. The issue stems from an improper capability check in the validate_upload function, which allows file operations without sufficient authorization enforcement. This flaw is tracked under CVE-2023-2496 with a CVSS 3.1 score of 7.1 and is associated with CWE-285.
Authenticated attackers who have been granted access to the plugin by an administrator can exploit the weakness to upload arbitrary files to the server. Successful exploitation may enable remote code execution on the affected site, though the attack requires user interaction and occurs over the network with high attack complexity.
The EPSS score for this CVE remains low and unchanged at a peak of 0.0564, indicating limited observed exploitation interest following disclosure. No details on specific patches or mitigation steps are provided in the available references, which primarily point to the vendor page on Codecanyon and Wordfence threat intelligence entries.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-33980
Vulnerability details
The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability check on the 'validate_upload' function in versions up to, and including, 3.3.19. This makes it possible for…
more
authenticated attackers with a role that the administrator previously granted access to the plugin to upload arbitrary files on the affected site's server which may make remote code execution possible.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Documented procedures facilitate correct implementation and ongoing management of authorization decisions.
Periodic reviews identify and correct flaws in authorization decisions or enforcement.
The control's documentation requirement reduces improper authorization by ensuring only mission-justified actions bypass authentication.
Establishing permitted attributes and values, plus auditing changes, ensures authorization decisions are based on correctly managed policy data.
Explicitly mandates authorizing remote access types before permitting connections, directly mitigating improper authorization.
The control explicitly requires authorization of each wireless access type prior to permitting connections.
Mandating explicit authorization of mobile device connections reduces the risk of improper authorization decisions for system access.
Specifying access authorizations for each account and requiring approvals for account requests enforces proper authorization decisions.