CVE-2023-6805

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 4.4.7 via the fetch_feed functionality. This makes it possible for authenticated attackers, with contributor access and above, to make web requests to arbitrary locations originating from the web application and can be used to modify information from internal services. NOTE: This vulnerability, exploitable by contributor-level users, was was fixed in version 4.4.7. The same vulnerability was fixed for author-level users in version 4.4.8.

CVSS v3 6.4 MEDIUM

6.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.1 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://plugins.trac.wordpress.org/changeset/3070624/feedzy-rss-feeds	Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/46978e1d-7adb-49f6-8e41-093f177c9a4d?source=cve	Vendor Advisory
https://plugins.trac.wordpress.org/changeset/3070624/feedzy-rss-feeds	Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/46978e1d-7adb-49f6-8e41-093f177c9a4d?source=cve	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:themeisle:rss_aggregator_by_feedzy:*:*:*:*:*:wordpress:*:*

History

14 Jan 2025, 20:36

Type	Values Removed	Values Added
First Time		Themeisle rss Aggregator By Feedzy Themeisle
CWE		CWE-918
CPE		cpe:2.3:a:themeisle:rss_aggregator_by_feedzy::::::wordpress::*
References	~~() https://plugins.trac.wordpress.org/changeset/3070624/feedzy-rss-feeds -~~	() https://plugins.trac.wordpress.org/changeset/3070624/feedzy-rss-feeds - Patch
References	~~() https://www.wordfence.com/threat-intel/vulnerabilities/id/46978e1d-7adb-49f6-8e41-093f177c9a4d?source=cve -~~	() https://www.wordfence.com/threat-intel/vulnerabilities/id/46978e1d-7adb-49f6-8e41-093f177c9a4d?source=cve - Vendor Advisory

Information

Published : 2024-04-17 13:15

Updated : 2025-01-14 20:36

NVD link : CVE-2023-6805

Mitre link : CVE-2023-6805

CVE.ORG link : CVE-2023-6805

JSON object : View

Products Affected

themeisle

rss_aggregator_by_feedzy

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2023-6805", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@wordfence.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 3.1}]}, "published": "2024-04-17T13:15:08.020", "references": [{"url": "https://plugins.trac.wordpress.org/changeset/3070624/feedzy-rss-feeds", "tags": ["Patch"], "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/46978e1d-7adb-49f6-8e41-093f177c9a4d?source=cve", "tags": ["Vendor Advisory"], "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/changeset/3070624/feedzy-rss-feeds", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/46978e1d-7adb-49f6-8e41-093f177c9a4d?source=cve", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "The RSS Aggregator by Feedzy \u2013 Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 4.4.7 via the fetch_feed functionality. This makes it possible for authenticated attackers, with contributor access and above, to make web requests to arbitrary locations originating from the web application and can be used to modify information from internal services. NOTE: This vulnerability, exploitable by contributor-level users, was was fixed in version 4.4.7. The same vulnerability was fixed for author-level users in version 4.4.8."}, {"lang": "es", "value": "El complemento RSS Aggregator by Feedzy \u2013 Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator para WordPress es vulnerable a Blind Server-Side Request Forgery en todas las versiones hasta la 4.4.7 incluida a trav\u00e9s de la funcionalidad fetch_feed. Esto hace posible que atacantes autenticados, con acceso de colaborador y superior, realicen solicitudes web a ubicaciones arbitrarias que se originan en la aplicaci\u00f3n web y pueden usarse para modificar informaci\u00f3n de servicios internos. NOTA: Esta vulnerabilidad, explotable por usuarios de nivel colaborador, se solucion\u00f3 en la versi\u00f3n 4.4.7. La misma vulnerabilidad se solucion\u00f3 para los usuarios de nivel de autor en la versi\u00f3n 4.4.8."}], "lastModified": "2025-01-14T20:36:23.243", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:themeisle:rss_aggregator_by_feedzy:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "77C320F3-9E20-4761-8C77-5193E16C65C7", "versionEndExcluding": "4.4.8"}], "operator": "OR"}]}], "sourceIdentifier": "security@wordfence.com"}