Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-54402— iDocView SSRF via /doc/upload Endpoint Hardcoded Token

Quick assessment

Affected
iDocView iDocView
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

iDocView 的 端点存在服务器端请求伪造（SSRF）漏洞。远程未认证攻击者可通过提供硬编码的默认令牌值 来绕过身份验证，从而获取任意 URL。攻击者可利用不受限制的 URL 协议处理机制（包括 URI），读取任意本地文件（如操作系统和应用配置文件），并访问原本不可达的内部网络主机和服务。该漏洞的利用证据最早由 Shadowserver 基金会于 2024 年 3 月 26 日发现。

CVSS 7.5 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-54402

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
iDocView SSRF via /doc/upload Endpoint Hardcoded Token
Source: CVE Program / CVE List V5
Vulnerability Description
iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value (testtoken) to bypass authentication. Attackers can exploit the unrestricted URL scheme handling, including file:// URIs, to read arbitrary local files such as operating-system and application configuration files, and to reach internal network hosts and services not otherwise accessible. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-03-26.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
iDocView iDocView * -

II. Public POCs for CVE-2023-54402

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-54402

请登录查看更多情报信息。

Other References for CVE-2023-54402 (3)

IV. Related Vulnerabilities

Same weakness: CWE-918

V. Comments for CVE-2023-54402

No comments yet

Leave a comment