Description
WordPress REST API存在信息泄露漏洞，此漏洞是由于v2/users接口对无权用户的请求验证不当导致的。
WordPress REST API CVE-2017-5487 信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/K3ysTr0K3R/CVE-2017-5487-EXPLOIT
https://www.rapid7.com/db/vulnerabilities/wordpress-cve-2017-5487/
https://nvd.nist.gov/vuln/detail/cve-2017-5487
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=31720
https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0771.html/
https://wordpress.stackexchange.com/questions/422041/fix-cve-2017-5487-vulnerability
https://vuldb.com/vuln/95347
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-core/wordpress-core-471-information-disclosure?asset_slug=wordpress
https://wpscan.com/vulnerability/ec8c295f-0ab4-4ab9-9a3a-38e9d64e12d3/
https://developer.aliyun.com/article/207137
https://blog.nsfocus.net/wordpress-user-enumeration-vulnerability-analysis/
https://cve.circl.lu/cve/CVE-2017-5487
https://www.tenablecloud.cn/plugins/nessus/96606
https://www.music4x.com/post/13264
https://avd.aliyun.com/detail?id=AVD-2017-5487
https://www.tenable.com/plugins/was/98256
https://www.cnitblog.com/gnaw0725/archive/2017/03/12/90525.html
https://www.aliyun.com/sswb/759309.html