CVE-2023-2897 Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass
Attackers can bypass Maintenance Mode protection by spoofing IP addresses in the X-Forwarded-For header, potentially accessing restricted functionality or sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-2897?
CVE-2023-2897 is a low-severity vulnerability in themefusecom Brizy – Page Builder, published on 9 Jun 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Brizy Page Builder plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.4.18. This is due to an implicit trust of user-supplied IP addresses in an 'X-Forwarded-For' HTTP header for the purpose of validating allowed IP addresses against a Maintenance Mode whitelist. Supplying a whitelisted IP address within the 'X-Forwarded-For' header allows maintenance mode to be bypassed and may result in the disclosure of potentially sensitive information or allow access to restricted functionality.
Which versions are affected by CVE-2023-2897?
It affects 1 product.
Products include Brizy Brizy.
How do I fix CVE-2023-2897?
No fix has been published for CVE-2023-2897 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-2897 being exploited?
There is no known exploitation of CVE-2023-2897 in the wild and no public exploit code.
Other vulnerabilities in themefusecom Brizy – Page Builder
- CVE-2024-10960 Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
- CVE-2024-3242 Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload
- CVE-2024-1311 Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload
- CVE-2024-3667 Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL
- CVE-2020-36714 Brizy < 1.0.126 - Authorization Bypass to Settings Updates
Sources
Also known as GHSA-5554-v93q-454g.