PT-2021-16101 · WordPress · Timetable/Event Schedule

Dc11 · Published 2021-09-20 · Updated 2021-10-01 · CVE-2021-24585

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions The Timetable and Event Schedule WordPress plugin versions prior to 2.4.0

Description The issue allows low-privilege users with the edit posts capability to retrieve sensitive user data, including hashed passwords, usernames, and email addresses, by requesting event Timeslot data and iterating over the user id. This can be combined with another issue where an arbitrary user ID can be set, potentially allowing unauthorized access to sensitive information.

Recommendations For versions prior to 2.4.0, update to version 2.4.0 or later to resolve the issue. As a temporary workaround, consider restricting the edit posts capability to high-privilege users until the update is applied. Restrict access to the event Timeslot data to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2021-24585

Affected Products

Timetable/Event Schedule

References · 4

• 🔥 https://wpscan.com/vulnerability/cd288a92-903b-47c9-83ac-8e5b677e949b · Exploit
• https://osv.dev/vulnerability/CVE-2021-24585 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24585 · Security Note
• https://t.me/cibsecurity/29089 · Telegram Post