[ad_1]
WPScan and the US Authorities Nationwide Vulnerability Database revealed a discover of a vulnerability found within the HubSpot WordPress plugin. The vulnerability exposes customers of the plugin to a Server Facet Request Forgery assault.
WPScan Vulnerability Report
The safety researchers at WPScan revealed the next report:
“HubSpot < 8.8.15 – Contributor+ Blind SSRF
Description
The plugin doesn’t validate the proxy URL given to the proxy REST endpoint, which might enable customers with the edit_posts functionality (by default contributor and above) to carry out SSRF assaults”
Server Facet Request Forgery (SSRF) Vulnerability
This vulnerability requires {that a} contributor degree subscriber be logged in for the publicity to occur.
The non-profit Open Net Software Safety Undertaking (OWASP), a worldwide group devoted to software program safety, an SSRF vulnerability can lead to the publicity of inner providers that aren’t meant to be uncovered.
In accordance with OWASP:
“In a Server-Facet Request Forgery (SSRF) assault, the attacker can abuse performance on the server to learn or replace inner assets.
The attacker can provide or modify a URL which the code working on the server will learn or submit information to, and by fastidiously choosing the URLs, the attacker could possibly learn server configuration corresponding to AWS metadata, connect with inner providers like http enabled databases or carry out submit requests in direction of inner providers which aren’t meant to be uncovered.”
The providers that aren’t purported to be uncovered are:
- “Cloud server meta-data
- Database HTTP interfaces
- Inner REST interfaces
- Information – The attacker could possibly learn information utilizing <file://> URIs”
HubSpot WordPress Plugin
The HubSpot WordPress plugin is utilized by over 200,000 publishers. It supplies CRM, reside chat, analytics and electronic mail advertising and marketing associated capabilities.
The vulnerability found by WPScan notes that it was mounted in model 8.8.15.
Nonetheless, the changelog that paperwork what was up to date within the software program exhibits that the HubSpot WordPress plugin acquired further updates to repair different vulnerabilities.
Here’s a record of the updates in keeping with the official changelog, so as starting with the oldest replace:
= 8.8.15 (2022-04-07) = * Repair safety situation associated to proxy URL = 8.9.14 (2022-04-12) = * Repair safety situation associated to type inputs = 8.9.20 (2022-04-13) = * Repair safety situation associated to sanitizing inputs
Whereas the safety agency WPScan and the Nationwide Vulnerability Database state that vulnerability was mounted in model 8.8.15, in keeping with the HubSpot plugin changelog, there have been additional safety fixes all the way in which as much as model 8.9.20.
So it my be prudent to replace the HubSpot plugin to no less than model 8.9.20, though absolutely the newest model of the HubSpot WordPress plugin, as of this writing, is model 8.11.0.
Citations
Learn WPScan Vulnerability Report
HubSpot < 8.8.15 – Contributor+ Blind SSRF
Learn the Nationwide Vulnerability Database Report
Evaluation the HubSpot WordPress Plugin Changelog
[ad_2]
