CVE-2024-6845 Scanner

SmartSearchWP is a plugin developed by WebDigit for enhancing search functionalities in WordPress websites. It is most commonly used by web administrators and developers looking to implement advanced search capabilities. The plugin integrates smoothly with WordPress, offering customizable search results and flexible API integrations. Administrators find it beneficial for tailoring search functionalities to specific site needs. It’s widely used for its efficient search management and seamless integration with other WordPress components. The primary goal of using SmartSearchWP is to provide users with an enhanced, accurate, and fast search experience on WordPress-based sites.

The detected vulnerability is an Information Disclosure issue. This specific flaw allows unauthenticated users to retrieve an encoded OpenAI API key via an unprotected REST endpoint. The lack of proper authorization mechanisms at a vulnerable endpoint is the source of this compromise. Attackers can exploit this flaw to decode and use the API key without permission. Such vulnerabilities can lead to unauthorized access to sensitive data or services through exposed API keys. This vulnerability highlights the importance of securing API endpoints to safeguard sensitive information.

The technical details of the vulnerability show that it resides in one of the plugin's REST API endpoints. Unauthenticated users can make a POST request to a specific endpoint and retrieve the encoded OpenAI API key. The endpoint lacks necessary authorization checks, enabling unauthorized access. By analyzing network traffic or guessing the endpoint, malicious users can decode the key easily. This flaw makes the OpenAI API vulnerable to abuse and misuse, as the key grants access to potentially sensitive services. The vulnerability is confirmed by checking the endpoint for expected responses and verifying the presence of the encoded key.

If exploited, this Information Disclosure vulnerability can have several consequences. Unauthorized parties may gain access to sensitive data or functionalities that the API key provides. It can lead to the abuse and overuse of the OpenAI API services, potentially incurring financial costs or operational disturbances. Furthermore, this exposure increases the risk of additional vulnerabilities being discovered, as an attacker with access might be able to gather more information about the system. Overall, it compromises the integrity, confidentiality, and possibly the availability of services depending on the OpenAI API integration.

REFERENCES

• https://wpscan.com/vulnerability/cfaaa843-d89e-42d4-90d9-988293499d26/
• https://nvd.nist.gov/vuln/detail/CVE-2024-6845