Lucene search

TwcertCVE-2023-37290

HistoryJul 20, 2023 - 11:15 a.m.

CVE-2023-37290

2023-07-2011:15:10

CWE-918

twcert

web.nvd.nist.gov

infodoc

online submission

approval system

ssrf

html to pdf

conversion

vulnerability

cve-2023-37290

security

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

60.5%

JSON

InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to load remote or local resources through HTML tags such as iframe. This vulnerability allows unauthenticated remote attackers to perform Server-Side Request Forgery (SSRF) attacks, gaining unauthorized access to arbitrary system files and uncovering the internal network topology.

Affected configurations

Nvd

Node

infodocdocument_on-line_submission_and_approval_systemMatch22547

infodocdocument_on-line_submission_and_approval_systemMatch22567

VendorProductVersionCPE
infodocdocument_on-line_submission_and_approval_system22547cpe:2.3:a:infodoc:document_on-line_submission_and_approval_system:22547:*:*:*:*:*:*:*
infodocdocument_on-line_submission_and_approval_system22567cpe:2.3:a:infodoc:document_on-line_submission_and_approval_system:22567:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
infodoc	document_on-line_submission_and_approval_system	22547	cpe:2.3:a:infodoc:document_on-line_submission_and_approval_system:22547:::::::*
infodoc	document_on-line_submission_and_approval_system	22567	cpe:2.3:a:infodoc:document_on-line_submission_and_approval_system:22567:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Document On-line Submission and Approval System",
    "vendor": "InfoDoc",
    "versions": [
      {
        "status": "affected",
        "version": "22547"
      },
      {
        "status": "affected",
        "version": "22567"
      }
    ]
  }
]

References

www.twcert.org.tw/tw/cp-132-7226-12195-1.html

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

60.5%

JSON

Related for CVE-2023-37290