CVE-2017-5487 PoC — WordPress 安全漏洞

Source

https://github.com/SeasonLeague/CVE-2017-5487

Associated Vulnerability

Title: WordPress 安全漏洞 (CVE-2017-5487)
Description:wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request.

Description

This is a vulnerability in the Linux kernel that was discovered and disclosed in 2017.

Readme

### CVE-2017-5487 is a vulnerability in the Linux kernel that was discovered and disclosed in 2017. The vulnerability allows a local attacker to gain root access to a system by exploiting a race condition in the key management subsystem of the kernel. The vulnerability can be exploited by a user with a valid account on a affected system, and can be used to gain root privileges and take control of the system. The vulnerability affects Linux kernel versions 2.6.x and 4.x, and it has been patched in the Linux kernel version 4.10.13 and later. It is important to note that this vulnerability is not remotely exploitable and requires an attacker to have access to the targeted system.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →