Paper/Archive/CVE-2024-4186

CVE-2024-4186

wisdmlabs Edwiser Bridge – WordPress Moodle Integration — Edwiser Bridge <= 3.0.5 - Authentication Bypass due to Missing Empty Value Check

EPSS 0.9%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 59.7.597 × 2011.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The Edwiser Bridge plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.5. This is due to the 'eb_user_email_verification_key' default value is empty, and the not empty check is missing in the 'eb_user_email_verify' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id. This can only be exploited if the 'Email Verification' setting is enabled.

Affected

ProductAffectedFixed inSource

Edwiser Bridge – WordPress Moodle Integration≤ 3.0.5–CNA

Scores by source

Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refwordfence.com/threat-intel/vulnerabilities/id/6969d281-f280-4714-9859-38ac66e9cc60?source=cve refplugins.trac.wordpress.org/browser/edwiser-bridge/tags/3.0.4/includes/class-eb-user-manager.php#L1571 refplugins.trac.wordpress.org/changeset/3081961/edwiser-bridge#file1