CVE-2024-24882

CRITICALNuclei

WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-24882 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.2.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Apr 5, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated May 17, 2024 · Source: CVE List

Affected products and versions

3
ProductSourceVersion range

Masteriyo LMS

Browse Masteriyo / Masteriyo LMS
VulnCheckVersion data not supplied

Masteriyo - LMS

Browse masteriyo / Masteriyo - LMSlearning-management-system

Default status: unaffected

CVE ListThrough 1.7.2affected

masteriyo

Browse masteriyo / masteriyo

Default status: unknown

CVE ListThrough 1.7.2affected

Nuclei templates

1
ProjectDiscoveryCRITICALMasteriyo LMS <= 1.7.2 - Unauthenticated Privilege EscalationCVSS 9.8

The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the update_logged_in_user() function in all versions up to, and including, 1.7.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.

Impact

An unauthenticated attacker can escalate privileges and gain full administrator access.

Remediation

Update the Masteriyo LMS plugin to version 1.7.3 or later and ensure proper capability checks are enforced.

WeaknessesCWE-269
Authorsriteshs4hu
Template tagscvecve2024wordpresswpwp-pluginlmspriv-esclearning-management-systemvkevintrusive
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:themegrill:masteriyo:*:*:*:*:free:wordpress:*:*
FOFA: body="/wp-content/plugins/learning-management-system/"
Google: inurl:"/wp-content/plugins/learning-management-system/"
https://wpscan.com/vulnerability/8407f428-12e7-4549-aa65-a241b7bdca41/ https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/learning-management-system/masteriyo-lms-172-unauthenticated-privilege-escalation https://plugins.trac.wordpress.org/changeset/3022839/learning-management-system/tags/1.7.3/includes/RestApi/Controllers/Version1/UsersController.php?old=2959283&old_path=learning-management-system%2Ftrunk%2Fincludes%2FRestApi%2FControllers%2FVersion1%2FUsersController.php https://nvd.nist.gov/vuln/detail/CVE-2024-24882

Source: ProjectDiscovery

References

3