CVE-2017-5487

published 2017-01-15

CVE-2017-5487: wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict…

Priority P3 52 medium 5.3 CVSS 3.0

AV N AC L PR N UI N S U C L I N A N

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	wordpress	< wordpress 4.7.1+dfsg-1 (bookworm)	wordpress 4.7.1+dfsg-1 (bookworm)
wordpress	wordpress	<= 4.7	—
wordpress	wordpress	>= 0 < 4.7.1+dfsg-1	4.7.1+dfsg-1
wordpress	wordpress	>= 0 < 4.7.1+dfsg-1	4.7.1+dfsg-1
wordpress	wordpress	>= 0 < 4.7.1+dfsg-1	4.7.1+dfsg-1
wordpress	wordpress	>= 0 < 4.7.1+dfsg-1	4.7.1+dfsg-1

Detection & IOCs extracted from sources · hover to see the quote

url /wp-json/wp/v2/users↗

path wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php↗

• → Monitor for unauthenticated GET requests to the WordPress REST API endpoint /wp-json/wp/v2/users, which enumerates post authors and exposes sensitive user information. ↗

• · Vulnerability is present in WordPress 4.7 before 4.7.1; the fix is included in version 4.7.1+dfsg-1 on Debian-based systems. ↗

CVSS provenance

nvd v3.0 5.3 MEDIUM CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

osv 5.3 MEDIUM

vendor_debian 5.3 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200