nuclei-templates/http/cves/2021/CVE-2021-25118.yaml

56 lines
1.7 KiB
YAML
Raw Normal View History

2022-04-30 20:40:38 +00:00
id: CVE-2021-25118
info:
name: Yoast SEO 16.7-17.2 - Information Disclosure
2022-04-30 20:40:38 +00:00
author: DhiyaneshDK
severity: medium
description: Yoast SEO plugin 16.7 to 17.2 is susceptible to information disclosure, The plugin discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints, which can help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.
2023-09-06 12:09:01 +00:00
remediation: Fixed in version 17.3.
2022-04-30 20:40:38 +00:00
reference:
- https://wpscan.com/vulnerability/2c3f9038-632d-40ef-a099-6ea202efb550
- https://plugins.trac.wordpress.org/changeset/2608691
- https://nvd.nist.gov/vuln/detail/CVE-2021-25118
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score: 5.3
cve-id: CVE-2021-25118
cwe-id: CWE-200
2023-10-14 11:27:55 +00:00
epss-score: 0.00155
epss-percentile: 0.51663
2023-09-06 12:09:01 +00:00
cpe: cpe:2.3:a:yoast:yoast_seo:*:*:*:*:*:wordpress:*:*
metadata:
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: yoast
product: yoast_seo
2023-09-06 12:09:01 +00:00
framework: wordpress
2023-07-11 19:49:27 +00:00
tags: wpscan,wordpress,cve2021,wp-plugin,fpd,cve,wp
2022-04-30 20:40:38 +00:00
http:
2022-04-30 20:40:38 +00:00
- method: GET
path:
- "{{BaseURL}}/wp-json/wp/v2/posts?per_page=1"
2022-04-30 20:50:08 +00:00
2022-04-30 20:40:38 +00:00
matchers-condition: and
matchers:
- type: word
2022-04-30 20:50:08 +00:00
part: header
2022-04-30 20:40:38 +00:00
words:
- "application/json"
2023-07-11 19:49:27 +00:00
- type: regex
regex:
- '"path":"(.*)/wp-content\\(.*)","size'
2022-04-30 20:50:08 +00:00
- type: status
status:
- 200
extractors:
- type: regex
group: 1
regex:
- '"path":"(.*)/wp-content\\(.*)","size'
2023-07-11 19:49:27 +00:00
part: body
# digest: 490a004630440220503977f0fcc1747524e905d112441b1110caa3603039024318b238314e381fb6022071d6d4bca9e020379d20eb8c65fff216c4635550da81ac601c3a8dc44c763c8f:922c64590222798bb761d5b6d8e72950