CVE-2023-3345: falha em LMS by Masteriyo
LMS by Masteriyo < 1.6.8 - Information Exposure
Publicada em · Atualizada em
18Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 2.0%
probabilidade de exploração
2.0%top 20% das CVEs
exploração observada
nãonenhuma fonte reporta
The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other students
Produtos afetados
Unknown · LMS by Masteriyo