vendor:
WordPress
by:
Mateus a.k.a Dctor
5,3
CVSS
MEDIUM
Information Disclosure
200
CWE
Product Name: WordPress
Affected Version From: 4.7.0
Affected Version To: 4.7.1
Patch Exists: YES
Related CWE: CVE-2017-5487
CPE: a:wordpress:wordpress
Other Scripts:
N/A
Tags: cve,cve2017,wordpress,wp,edb
CVSS Metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Nuclei References:
https://www.exploit-db.com/exploits/41497, https://www.wordfence.com/blog/2016/12/wordfence-blocks-username-harvesting-via-new-rest-api-wp-4-7/, https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/, https://nvd.nist.gov/vuln/detail/CVE-2017-5487, http://www.openwall.com/lists/oss-security/2017/01/14/6
Nuclei Metadata: {'max-request': 2, 'shodan-query': 'http.component:"WordPress"', 'verified': True, 'vendor': 'wordpress', 'product': 'wordpress'}
Platforms Tested: None
2017
WordPress REST API Information Disclosure Vulnerability
WordPress Core before 4.7.1 is susceptible to user enumeration because it does not properly restrict listings of post authors via wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API, which allows a remote attacker to obtain sensitive information via a wp-json/wp/v2/users request.
Mitigation:
Upgrade to WordPress version 4.7.2 or later.