CVE-2022-3360 - LearnPress < 4.1.7.2 - Unauthenticated PHP Object Injection via REST API

Back Back to CVE browser

HIGH

LearnPress < 4.1.7.2 - Unauthenticated PHP Object Injection via REST API

Published Oct 31, 2022

8.1

HIGH

CVSS 3.1

EPSS 2.01%

Description

The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to unauthenticated users, which could lead to PHP Object Injection when a suitable gadget is present, leadint to remote code execution (RCE). To successfully exploit this vulnerability attackers must have knowledge of the site secrets, allowing them to generate a valid hash via the wp_hash() function.

Affected products

Vendor n/a Product LearnPress – WordPress LMS Plugin Default
n/a
- Version
  4.1.7.2
  Status
  affected
  Constraints
  <4.1.7.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

LearnPress – WordPress LMS Plugin

n/a

Version	Status	Constraints
4.1.7.2	affected	<4.1.7.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42743
Advisory
https://wpscan.com/vulnerability/acea7a54-a964-4127-a93f-f38f883074e3
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42743		Advisory
https://wpscan.com/vulnerability/acea7a54-a964-4127-a93f-f38f883074e3		ExploitThird Party Advisory