CVE-2020-8615
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-8615
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8615.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2020-8615
- Published
- 2020-02-04T20:15:14Z
- Modified
- 2024-09-03T03:35:09.535571Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing other malicious actions (such as blocking legitimate instructors).
- References
-
- http://packetstormsecurity.com/files/156585/WordPress-Tutor-LMS-1.5.3-Cross-Site-Request-Forgery.html
- https://www.themeum.com/tutor-lms-updated-v1-5-3/
- https://www.getastra.com/blog/911/plugin-exploit/cross-site-request-forgery-in-tutor-lms-plugin/
- https://wpvulndb.com/vulnerabilities/10058
- https://www.jinsonvarghese.com/cross-site-request-forgery-in-tutor-lms/
Affected packages
Git / github.com/themeum/tutor
Affected ranges
- Type
- GIT
- Repo
- https://github.com/themeum/tutor
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
1.*
1.4.6
v1.*
v1.0.0
v1.0.0-alpha
v1.0.1
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.0.6
v1.0.7
v1.0.8
v1.0.9
v1.1.0
v1.1.1
v1.2.0
v1.2.1
v1.2.11
v1.2.12
v1.2.13
v1.2.20
v1.3.0
v1.3.1
v1.3.2
v1.3.3
v1.3.4
v1.3.5
v1.3.6
v1.3.7
v1.3.8
v1.3.9
v1.4.0
v1.4.1
v1.4.2
v1.4.3
v1.4.4
v1.4.5
v1.4.6
v1.4.7
v1.4.8
v1.4.9
v1.5.0
v1.5.1
v1.5.2