CVE-2024-4351
HIGH EXPLOITEDTutor LMS Pro <= 2.7.0 - Authenticated Missing Authorization in Authenticate Function
Title source: llmExploitation Summary
CVE-2024-4351 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including ZSECURE.
AI-analyzed exploit summary The PoC generates a malicious .url shortcut file that exploits CVE-2024-4351 by pointing to a remote SMB share, likely triggering arbitrary code execution via Windows shortcut file handling. The script is minimal but functional, demonstrating the core exploit mechanism.
Description
The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'authenticate' function in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to gain control of an existing administrator account.
Exploits (1)
The PoC generates a malicious .url shortcut file that exploits CVE-2024-4351 by pointing to a remote SMB share, likely triggering arbitrary code execution via Windows shortcut file handling. The script is minimal but functional, demonstrating the core exploit mechanism.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H