CVE-2020-8615 in Tutor LMS Plugin

Riassunto

di MITRE

A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing other malicious actions (such as blocking legitimate instructors).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 04/02/2020
• Moderazione: accettato
• Voce: VDB-149697
• CPE: pronto
• CWE: CWE-352 (confermato)
• Sfruttamento: Scaricare
• CVSS: 6.5 (NVD)
• EPSS: 0.08830
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8615
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8615
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8615/