CVE-2019-9880

EPSS 34.8%◆ VulnCheck KEV

Vexday Risk Score

72Prioridade alta

Decisão SSVC (CISA)

Act

Exploração + impacto → ação imediata

Maturidade do exploit

Exploit funcional

Exploit automatizável disponível (Nuclei/Metasploit).

CVSS —EPSS 34.8%KEV nãoPoC públicaNuclei simMetasploit —Patch —

Ciclo de vida

21 mai 2019PoC pública

10 jun 2019Publicada no NVD

Recomendação: Corrigir o quanto antes — há exploração ativa confirmada.

An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 2

cve_referencepacketstormsecurity.com/files/153025/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.htmlnão verificado exploitdbwww.exploit-db.com/exploits/46886não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Referências

http://packetstormsecurity.com/files/153025/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html https://github.com/pentestpartners/snippets/blob/master/wp-graphql0.2.3_exploit.py https://github.com/wp-graphql/wp-graphql/releases/tag/v0.3.0 https://wpvulndb.com/vulnerabilities/9282 https://www.pentestpartners.com/security-blog/pwning-wordpress-graphql/