CVE-2022-2080 — Authorization Bypass Through User-Controlled Key in Sensei LMS

CWE-639 — Authorization Bypass Through User-Controlled Key3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 42.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Automattic Sensei LMS
Timeline
PublishedAug 29

Description

The Sensei LMS WordPress plugin before 4.5.2 does not ensure that the sender of a private message is either the teacher or the original sender, allowing any authenticated user to send messages to arbitrary private conversation via a IDOR attack. Note: Attackers are not able to see responses/messages between the teacher and student

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR↗2022-08-29
▶
GHSA
GHSA-35xw-38xf-5f44: The Sensei LMS WordPress plugin before 4↗2022-08-29
▶
CVE-2022-2080 — Automattic Sensei LMS vulnerability | cvebase