CVE-2022-4417 WP Cerber < 9.3.3 - User Enumeration Bypass via Rest API
Attackers can bypass user enumeration restrictions in WP Cerber plugin when the blog is in a subdirectory, exposing user lists.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-4417?
CVE-2022-4417 is a medium-severity vulnerability in Unknown WP Cerber Security, Anti-spam & Malware Scan, published on 2 Jan 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the REST API users endpoint when the blog is in a subdirectory, which could allow attackers to bypass the restriction in place and list users
Which versions are affected by CVE-2022-4417?
It affects 1 product.
Products include Cerber Wp Cerber Security\, Anti-Spam \& Malware Scan.
How do I fix CVE-2022-4417?
No fix has been published for CVE-2022-4417 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-4417 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-4417 exists.
Other vulnerabilities in Unknown WP Cerber Security, Anti-spam & Malware Scan
Sources
Also known as GHSA-cp43-7gjw-vj3h.