Unauthenticated hidden groups disclosure via Ajax groups search
访问控制 / 访问控制缺陷（通用） / #282176
该报告还没有中文解读。
原文摘录
摘自原文（6161 字符中的一小部分）
*Note: this issue was previously submitted to `[email protected]`, because I did not have the rep to submit it here. That was cleared up with HackerOne, so I am now submitting the issue here, at @aaroncampbell's direction.*
原文中的代码
<?php
if ( ! empty( $r['status'] ) ) {
if ( ! is_array( $r['status'] ) ) {
$r['status'] = preg_split( '/[\s,]+/', $r['status'] );
}
$r['status'] = array_map( 'sanitize_title', $r['status'] );
$status_in = "'" . implode( "','", $r['status'] ) . "'"; …默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 WordPress 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @jdgrimes · 版权归作者与 WordPress 所有