CVE-2023-5974
Published: 27 November 2023
Summary
CVE-2023-5974 is a critical-severity SSRF (CWE-918) vulnerability in Wpb Show Core Project Wpb Show Core. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 0.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The WPB Show Core WordPress plugin through version 2.2 contains a server-side request forgery vulnerability (CWE-918) that is exposed through the path parameter. The flaw received a CVSS 3.1 score of 9.8, reflecting network-accessible attack vectors that require no authentication or user interaction and can affect confidentiality, integrity, and availability.
An unauthenticated remote attacker can supply an arbitrary path value to induce the plugin to issue HTTP requests to internal or external resources chosen by the attacker. Successful exploitation can therefore be used to scan internal networks, interact with services that are not normally reachable from the internet, or retrieve sensitive data accessible to the web server.
The associated EPSS score has reached a current value of 0.7833 with a recorded peak of 0.8355, indicating sustained and substantial exploitation interest since disclosure. Public references are limited to WPScan entries that catalog the issue but do not detail available patches or configuration workarounds.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-58242
Vulnerability details
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Penetration testing attempts server-side requests to internal resources, identifying SSRF weaknesses for remediation.
Outbound connections to external resources can be monitored and limited at the boundary, reducing SSRF impact.
Validates server-side URLs and resource references to block SSRF attempts.
Detects server-side request forgery through monitoring of unexpected outbound connections.