CVE-2024-7786 - OpenCVE

The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable yes

Technical Impact partial

Vendors	Products
Automattic	Sensei Lms

No data.

No data.

References

Link	Providers
https://wpscan.com/vulnerability/f44e6f8f-3ef2-45c9-ae9c-9403305a548a/

History

Wed, 04 Sep 2024 15:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Automattic Automattic sensei Lms
CPEs		cpe:2.3:a:automattic:sensei_lms::::::::
Vendors & Products		Automattic Automattic sensei Lms
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 04 Sep 2024 06:15:00 +0000

Type	Values Removed	Values Added
Description		The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates.
Title		Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak
References		https://wpscan.com/vulnerability/f44e6f8f-3ef2-45c9-ae9c-9403305a548a/

MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2024-09-04T06:00:04.429Z

Updated: 2024-09-04T14:17:10.670Z

Reserved: 2024-08-14T08:29:31.987Z

Link: CVE-2024-7786

Vulnrichment

Updated: 2024-09-04T14:16:53.856Z

NVD

Status : Awaiting Analysis

Published: 2024-09-04T06:15:17.600

Modified: 2024-09-04T15:35:26.560

Link: CVE-2024-7786

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-7786", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2024-08-14T08:29:31.987Z", "datePublished": "2024-09-04T06:00:04.429Z", "dateUpdated": "2024-09-04T14:17:10.670Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2024-09-04T06:00:04.429Z"}, "title": "Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak", "problemTypes": [{"descriptions": [{"description": "CWE-200 Information Exposure", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "Sensei LMS", "versions": [{"status": "affected", "versionType": "semver", "version": "0", "lessThan": "4.24.2"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates."}], "references": [{"url": "https://wpscan.com/vulnerability/f44e6f8f-3ef2-45c9-ae9c-9403305a548a/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Sushmita Poudel", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"affected": [{"vendor": "automattic", "product": "sensei_lms", "cpes": ["cpe:2.3:a:automattic:sensei_lms:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "4.24.2", "versionType": "semver"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-09-04T14:16:06.300640Z", "id": "CVE-2024-7786", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-04T14:17:10.670Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-7786", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-04T14:16:06.300640Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:automattic:sensei_lms:*:*:*:*:*:*:*:*"], "vendor": "automattic", "product": "sensei_lms", "versions": [{"status": "affected", "version": "0", "lessThan": "4.24.2", "versionType": "semver"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-04T14:16:53.856Z"}}], "cna": {"title": "Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Sushmita Poudel"}, {"lang": "en", "type": "coordinator", "value": "WPScan"}], "affected": [{"vendor": "Unknown", "product": "Sensei LMS", "versions": [{"status": "affected", "version": "0", "lessThan": "4.24.2", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://wpscan.com/vulnerability/f44e6f8f-3ef2-45c9-ae9c-9403305a548a/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "x_generator": {"engine": "WPScan CVE Generator"}, "descriptions": [{"lang": "en", "value": "The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-200 Information Exposure"}]}], "providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2024-09-04T06:00:04.429Z"}}}, "cveMetadata": {"cveId": "CVE-2024-7786", "state": "PUBLISHED", "dateUpdated": "2024-09-04T14:17:10.670Z", "dateReserved": "2024-08-14T08:29:31.987Z", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "datePublished": "2024-09-04T06:00:04.429Z", "assignerShortName": "WPScan"}, "dataVersion": "5.1"}