CVE-2023-4506

概要

参考情報

• medium.com/%40cybertrinchera/cve-2023-4506-cve-2023-4505-ldap-passback-on-miniorange-plugins-ca7328c84313 · Exploit
• plugins.trac.wordpress.org/changeset/2973005/ldap-login-for-intranet-sites
• wordpress.org/plugins/ldap-login-for-intranet-sites · Product
• wordfence.com/threat-intel/vulnerabilities/id/0585969d-dd08-4058-9d72-138a55a2cdf1 · Third Party Advisory

active directory integration / ldap integration のその他の脆弱性

• CVE-2023-5003高 7.5The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an admin…
• CVE-2023-3447高 7.6The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4…
• CVE-2023-2599中 6.5The Active Directory Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via th…
• CVE-2023-2484中 4.9The Active Directory Integration plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order parameters in vers…
• CVE-2023-0812高 7.5The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for som…