CVE-2023-25171

CVSS V2 None CVSS V3 None

Description

Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt denial-of-service attacks against the Password reset page. An attacker could potentially send a large number of emails if they know the email addresses of users in Kiwi TCMS. Additionally that may strain SMTP resources. Users should upgrade to v12.0 or later to receive a patch. As potential workarounds, users may install and configure a rate-limiting proxy in front of Kiwi TCMS and/or configure rate limits on their email server when possible.

Overview

CVE ID
CVE-2023-25171

Assigner
security-advisories@github.com

Vulnerability Status
Analyzed

Published Version
2023-02-15T15:15:11

Last Modified Date
2023-02-24T17:34:28

Weakness Enumerations

CWE	URL
CWE-770	http://cwe.mitre.org/data/definitions/770.html
CWE-770	http://cwe.mitre.org/data/definitions/770.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:kiwitcms:kiwi_tcms::::::::	1	OR		12.0

References

Reference URL	Reference Tags
https://github.com/kiwitcms/Kiwi/commit/761305d04f5910ba14cc04d1255a8f1afdbb87f3	Patch
https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7j9h-3jxf-3vrf	Vendor Advisory
https://huntr.dev/bounties/3b712cb6-3fa3-4f71-8562-7a7016c6262e	Permissions Required
https://kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120/	Release Notes

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-25171
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25171

History

Created	Old Value	New Value	Data Type	Notes
2023-04-17 07:47:45				Added to TrackCVE
2023-04-17 07:47:47			Weakness Enumeration	new