Vulnerability Details : CVE-2023-36661
Public exploit exists!
Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)
Vulnerability category: Server-side request forgery (SSRF)
Products affected by CVE-2023-36661
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
- cpe:2.3:a:shibboleth:xmltooling:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-36661
0.12%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 47 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2023-36661
-
Ivanti Connect Secure Unauthenticated Remote Code Execution
Disclosure Date: 2024-01-31First seen: 2024-02-22exploit/linux/http/ivanti_connect_secure_rce_cve_2024_21893This module chains a server side request forgery (SSRF) vulnerability (CVE-2024-21893) and a command injection vulnerability (CVE-2024-21887) to exploit vulnerable instances of either Ivanti Connect Secure or Ivanti Policy Secure, to achieve unauthenticated remote code
CVSS scores for CVE-2023-36661
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2023-36661
-
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.Assigned by: nvd@nist.gov (Primary)
References for CVE-2023-36661
-
https://shibboleth.net/community/advisories/secadv_20230612.txt
Vendor Advisory
-
https://www.debian.org/security/2023/dsa-5432
Debian -- Security Information -- DSA-5432-1 xmltoolingThird Party Advisory
Jump to