CVE-2023-40779

MEDIUMNuclei

IceWarp Mail Server Deep Castle 2 v.13.0.1.2 - Open Redirect

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2023-40779 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 25, 2024 · Source: CVE List

Nuclei templates

1
ProjectDiscoveryMEDIUMIceWarp Mail Server Deep Castle 2 v.13.0.1.2 - Open RedirectCVSS 6.1

An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL.

Impact

Attackers can craft malicious redirect URLs to phish IceWarp Mail Server users, potentially stealing email credentials by redirecting victims to attacker-controlled domains that mimic the legitimate login page.

Remediation

Update IceWarp Mail Server Deep Castle 2 to a version newer than 13.0.1.2 that validates redirect URLs and prevents open redirect attacks.

WeaknessesCWE-601
Authorsr3Y3r53
Template tagscve2023cveicewarpredirectvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:icewarp:deep_castle_g2:13.0.1.2:*:*:*:*:*:*:*
Shodan: title:"IceWarp"
Shodan: http.title:"icewarp"
FOFA: title="icewarp"
Google: intitle:"icewarp"
https://medium.com/@muthumohanprasath.r/open-redirection-vulnerability-on-icewarp-webclient-product-cve-2023-40779-61176503710 https://nvd.nist.gov/vuln/detail/CVE-2023-40779 https://medium.com/%40muthumohanprasath.r/open-redirection-vulnerability-on-icewarp-webclient-product-cve-2023-40779-61176503710

Source: ProjectDiscovery

References

3