CVE-2023-34020

MEDIUMNuclei

WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-34020 has a selected CVSS score of 4.7 (medium); EIP currently links 1 Nuclei template.

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.6.4.3.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 28, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Uncanny Toolkit for LearnDash

Browse Uncanny Owl / Uncanny Toolkit for LearnDashuncanny-learndash-toolkit

Default status: unaffected

CVE ListThrough 3.6.4.3affected

Nuclei templates

1
ProjectDiscoveryMEDIUMUncanny Toolkit for LearnDash - Open RedirectionCVSS 4.7

A vulnerability in the WordPress Uncanny Toolkit for LearnDash Plugin allowed malicious actors to redirect users, posing a potential risk of phishing incidents. The issue has been resolved in version 3.6.4.4, and users are urged to update for security.

Impact

Unauthenticated attackers can craft malicious redirect URLs through the REST API to redirect LearnDash users to phishing sites, potentially stealing login credentials and compromising user accounts.

Remediation

Update Uncanny Toolkit for LearnDash plugin to version 3.6.4.4 or later that validates redirect URLs and prevents open redirect attacks in the REST API.

WeaknessesCWE-601
AuthorsLeDoubleTake
Template tagscve2023cvewordpressuncanny-learndash-toolkitwpscanredirectvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
CPE: cpe:2.3:a:uncannyowl:uncanny_toolkit_for_learndash:*:*:*:*:*:*:*:*
https://patchstack.com/database/vulnerability/uncanny-learndash-toolkit/wordpress-uncanny-toolkit-for-learndash-plugin-3-6-4-3-open-redirection-vulnerability https://wordpress.org/plugins/uncanny-learndash-toolkit/ https://patchstack.com/database/vulnerability/uncanny-learndash-toolkit/wordpress-uncanny-toolkit-for-learndash-plugin-3-6-4-3-open-redirection-vulnerability?_s_id=cve

Source: ProjectDiscovery

References

2