CVE-2021-21389

Privilege Escalation via REST API Leading to Docker Container Escape Lab Writeup (time required 30 mins - 60 mins) A lab by Warren Atkinson A wordpress website with outdated vulnerable plugins leading to authentication bypass & rce, web host machine takeover leading to container breakout to host Subjects covered API manipulation Creating a user account with auth bypas

BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in BuddyPress 7.2.1. Existing installations of the plu…

CVE-2021-21389 BuddyPress < 721 - REST API Privilege Escalation to RCE PoC (Full) Affected version: 500 to 720 User requirement: Subscriber user Method: Privilege Escalation to Administrator and trigger RCE via REST API Endpoint: /v1/members/me endpoint How to use Docker git clone githubcom/HoangKien1020/CVE-2021-21389 cd CVE-2021-21389/ docker build -

Method: Privilege Escalation to Administrator and trigger RCE via REST API

CVE-2021-21389 BuddyPress < 721 - REST API Privilege Escalation to RCE PoC (Full) Affected version: 500 to 720 User requirement: Subscriber user Method: Privilege Escalation to Administrator and trigger RCE via REST API Endpoint: /v1/members/me endpoint How to use Docker git clone githubcom/HoangKien1020/CVE-2021-21389 cd CVE-2021-21389/ docker build -