CVE-2020-13700

HIGHNuclei

acf-to-rest-api plugin insecure direct object reference (IDOR) via permalink manipulation

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2020-13700 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object reference via permalinks manipulation, as demonstrated by a wp-json/acf/v3/options/ request that reads sensitive information in the wp_options table, such as the login and pass values.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

airesvsg/acf-to-rest-api

Browse Packagist / airesvsg/acf-to-rest-api
GitHub AdvisoryThrough 3.1.0affected

Nuclei templates

1
ProjectDiscoveryHIGHWordPress acf-to-rest-api <=3.1.0 - Insecure Direct Object ReferenceCVSS 7.5

WordPress acf-to-rest-ap through 3.1.0 allows an insecure direct object reference via permalinks manipulation, as demonstrated by a wp-json/acf/v3/options/ request that can read sensitive information in the wp_options table such as the login and pass values.

Impact

An attacker can exploit this vulnerability to access sensitive data, such as user information or administrative credentials.

Remediation

Update the acf-to-rest-api plugin to version >3.1.0 or apply the latest security patches.

WeaknessesCWE-639
Authorspikpikcu
Template tagscvecve2020wordpresspluginacf_to_rest_api_projectvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:acf_to_rest_api_project:acf_to_rest_api:*:*:*:*:*:wordpress:*:*
https://gist.github.com/mariuszpoplwski/4fbaab7f271bea99c733e3f2a4bafbb5 https://wordpress.org/plugins/acf-to-rest-api/#developers https://github.com/airesvsg/acf-to-rest-api https://nvd.nist.gov/vuln/detail/CVE-2020-13700 https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

4