Private data disclosure/privilege escalation through the block editor in Wordpress
CVE-2021-39203

6.8MEDIUM

Key Information:

Vendor
Wordpress
Status
WordPress-develop
Vendor
CVE Published:
9 September 2021

Summary

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions authenticated users who don't have permission to view private post types/data can bypass restrictions in the block editor under certain conditions. This affected WordPress 5.8 beta during the testing period. It's fixed in the final 5.8 release.

Affected Version(s)

wordpress-develop 5.8 beta 1

References

https://github.com/WordPress/wordpress-develop/security/a...
x_refsource_CONFIRM
https://hackerone.com/reports/1225282
x_refsource_MISC

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.