CVE-2023-54402

Summary

The iDocView application has a server-side request forgery vulnerability in its document upload endpoint that allows unauthenticated attackers to fetch arbitrary URLs and read local files or access internal services. This flaw enables attackers to bypass authentication using a hardcoded token and exploit unrestricted URL schemes including file:// URIs.

Exploitability

The vulnerability is easily exploitable with no authentication required, as attackers can simply send a request to the /doc/upload endpoint with the hardcoded testtoken value to bypass authentication and fetch any URL or read any local file.

Blast radius

The impact could be significant as attackers can access sensitive configuration files, internal network services, and potentially exfiltrate data from systems that are otherwise not directly exposed to the internet.

Detection

Monitor for requests to the /doc/upload endpoint with the testtoken parameter and observe for unusual file:// URI access patterns in network logs or file access logs.

Prioritized remediation

Upgrade to version 2.590 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.