CVE-2023-4591

CVE-2023-4591 is a critical local file inclusion (LFI) vulnerability affecting WPN-XM Serverstack version 0.8.6. An unauthenticated attacker can exploit this flaw by manipulating the 'page' parameter in the /tools/webinterface/index.php endpoint via a GET request. This allows for the loading of arbitrary PHP files, potentially leading to a webshell and complete compromise of the server. The vulnerability carries a CVSS score of 9.8 (Critical), indicating it is easily exploitable over the network with low attack complexity and no user interaction required, resulting in high impact to confidentiality, integrity, and availability. Its EPSS score is low, suggesting a minimal probability of exploitation in the wild, and it is not listed in CISA's KEV catalog. Currently, there is no public exploit code available in Metasploit, Nuclei, or ExploitDB, and it is not known to be actively exploited. Despite this, the vulnerability has garnered some community discussion and media coverage, indicating a degree of awareness within the cybersecurity community.