nuclei-templates/http/cves/2020/CVE-2020-35234.yaml

43 lines
1.5 KiB
YAML
Raw Normal View History

2022-03-01 13:40:54 +00:00
id: CVE-2020-35234
2020-12-13 20:05:21 +00:00
info:
name: SMTP WP Plugin Directory Listing
2020-12-13 20:05:21 +00:00
author: PR3R00T
2020-12-14 13:34:51 +00:00
severity: high
description: The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and its content available for access.
2023-09-27 15:51:13 +00:00
impact: |
Low: Information disclosure
2023-09-06 12:22:36 +00:00
remediation: Upgrade to version 1.4.3 or newer and consider disabling debug logs.
2022-03-01 13:40:54 +00:00
reference:
- https://nvd.nist.gov/vuln/detail/CVE-2020-35234
- https://blog.nintechnet.com/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability/
- https://wordpress.org/plugins/easy-wp-smtp/#developers
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2020-35234
cwe-id: CWE-532
epss-score: 0.37453
epss-percentile: 0.9684
2023-09-06 12:22:36 +00:00
cpe: cpe:2.3:a:wp-ecommerce:easy_wp_smtp:*:*:*:*:*:wordpress:*:*
metadata:
max-request: 2
2023-07-11 19:49:27 +00:00
vendor: wp-ecommerce
product: easy_wp_smtp
2023-09-06 12:22:36 +00:00
framework: wordpress
2024-01-14 09:21:50 +00:00
tags: cve2020,cve,wordpress,wp-plugin,smtp,wp-ecommerce
2020-12-13 20:05:21 +00:00
http:
2020-12-13 20:05:21 +00:00
- method: GET
path:
- "{{BaseURL}}/wp-content/plugins/easy-wp-smtp/"
- "{{BaseURL}}/wp-content/plugins/wp-mail-smtp-pro/"
2020-12-13 20:05:21 +00:00
matchers:
- type: word
words:
- "debug"
- "log"
- "Index of"
condition: and
# digest: 4a0a00473045022100b84f61675ab951d736727179e6875f0aeac83d8f4b5d5772daf149b4b5b3d69f022043653e32e7024a284184413b79ca759431015729918a24730bef4a2eec2119a8:922c64590222798bb761d5b6d8e72950