Описание
The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowing unauthenticated attackers to access information from Lessons that should not be publicly available.
Ссылки
- Product
- Product
- ExploitThird Party Advisory
- Product
- Product
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.2.1 (исключая)
cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 78%
0.01147
Низкий
7.5 High
CVSS3
Дефекты
Связанные уязвимости
CVSS3: 7.5
github
больше 2 лет назад
The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowing unauthenticated attackers to access information from Lessons that should not be publicly available.
EPSS
Процентиль: 78%
0.01147
Низкий
7.5 High
CVSS3