2022-02-22 13:23:25 +00:00
id : CVE-2021-25074
2022-02-12 16:49:24 +00:00
info :
2022-04-21 21:16:41 +00:00
name : WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect
2022-02-12 16:49:24 +00:00
author : dhiyaneshDk
severity : medium
2022-04-22 10:38:41 +00:00
description : WordPress WebP Converter for Media < 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an open redirect issue.
2022-04-21 21:16:41 +00:00
reference :
- https://wpscan.com/vulnerability/f3c0a155-9563-4533-97d4-03b9bac83164
- https://nvd.nist.gov/vuln/detail/CVE-2021-25074
2022-02-22 13:26:30 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 6.1
2022-02-22 13:26:30 +00:00
cve-id : CVE-2021-25074
cwe-id : CWE-601
2022-04-21 21:16:41 +00:00
tags : cve,cve2021,wordpress,redirect,wp-plugin,webpconverter
2022-02-12 16:49:24 +00:00
requests :
- method : GET
path :
- "{{BaseURL}}/wp-content/plugins/webp-converter-for-media/includes/passthru.php?src=https://example.com"
matchers :
- type : regex
part : header
2022-02-15 11:22:00 +00:00
regex :
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)example\.com\/?(\/|[^.].*)?$' # https://regex101.com/r/ZDYhFh/1
2022-04-21 21:16:41 +00:00
# Enhanced by mp on 2022/04/21
