Vulnerability · Published Aug 29, 2022 · Assigned by WPScan
CVE-2022-2080Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR
Medium 4.3
In plain English
A medium-severity authorization bypass via user-controlled key in Sensei LMS – Online Courses, Quizzes, & Learning from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).
Severity (CVSS NVD)4.3Medium
Exploit odds (30 days)0.8%top 42.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Sensei LMS WordPress plugin before 4.5.2 does not ensure that the sender of a private message is either the teacher or the original sender, allowing any authenticated user to send messages to arbitrary private conversation via a IDOR attack. Note: Attackers are not able to see responses/messages between the teacher and student
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Sensei LMS – Online Courses, Quizzes, & Learning | 4.5.2 – before 4.5.2 |
Weakness: CWE-639
References
- https://wpscan.com/vulnerability/5395d196-a39a-4a58-913e-5b5b9d6123a5 x_refsource_MISC
- https://hackerone.com/reports/1592596 x_refsource_MISC