PT-2023-16541 · WordPress · Active Directory Integration / Ldap Integration
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Active Directory Integration / LDAP Integration WordPress plugin versions prior to 4.1.1
Description
The issue is related to improper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure.
Recommendations
For versions prior to 4.1.1, update to version 4.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and POST requests to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Active Directory Integration / Ldap Integration