CVE-2017-5487 WordPress Core < 4.7.1 - Information Disclosure
MediumCVSS 5.3
EPSS 87.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/wordpress(Debian:12) | < 4.7.1+dfsg-1 | 4.7.1+dfsg-1 |
| debian/wordpress(Debian:13) | < 4.7.1+dfsg-1 | 4.7.1+dfsg-1 |
| debian/wordpress(Debian:14) | < 4.7.1+dfsg-1 | 4.7.1+dfsg-1 |
| WordPress | <= 4.7 | No fix listed |
| WordPress(WordPress) | < 3.7 | 3.7 |
| WordPress(WordPress) | >= 3.7, < 3.7.17 | 3.7.17 |
| WordPress(WordPress) | >= 3.8, < 3.8.17 | 3.8.17 |
| WordPress(WordPress) | >= 3.9, < 3.9.15 | 3.9.15 |
| WordPress(WordPress) | >= 4.0, < 4.0.14 | 4.0.14 |
| WordPress(WordPress) | >= 4.1, < 4.1.14 | 4.1.14 |
| WordPress(WordPress) | >= 4.2, < 4.2.11 | 4.2.11 |
| WordPress(WordPress) | >= 4.3, < 4.3.7 | 4.3.7 |
| WordPress(WordPress) | >= 4.4, < 4.4.6 | 4.4.6 |
| WordPress(WordPress) | >= 4.5, < 4.5.5 | 4.5.5 |
| WordPress(WordPress) | >= 4.6, < 4.6.2 | 4.6.2 |
| WordPress(WordPress) | = 4.7 | No fix listed |
References
- Debian Security Tracker CVE-2017-5487 vendor-advisory
- [oss-security] 20170114 Re: CVE Request: Wordpress: 8 security issues in 4.7 mailing-list third-party-advisory
- 95391 vdb-entry
- 1037591 vdb-entry
- codex.wordpress.org release-notes vendor-advisory
- github.com patch
- wordpress.org vendor-advisory
- wpvulndb.com
- 41497 exploit
- www.wordfence.com third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org
- bugs.debian.org issue-tracking