From 0f29a619f73c2b3e39f560278d528baed6bbd31f Mon Sep 17 00:00:00 2001
From: Dhiyaneshwaran <leedhiyanesh@gmail.com>
Date: Mon, 6 Nov 2023 14:51:19 +0530
Subject: [PATCH] Create CVE-2023-34020.yaml

---
 http/cves/2023/CVE-2023-34020.yaml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 http/cves/2023/CVE-2023-34020.yaml

diff --git a/http/cves/2023/CVE-2023-34020.yaml b/http/cves/2023/CVE-2023-34020.yaml
new file mode 100644
index 0000000000..6e366ad761
--- /dev/null
+++ b/http/cves/2023/CVE-2023-34020.yaml
@@ -0,0 +1,25 @@
+id: CVE-2023-34020
+
+info:
+  name: Uncanny Toolkit for LearnDash - Open Redirection 
+  author: LeDoubleTake
+  severity: low
+  reference:
+    - https://patchstack.com/database/vulnerability/uncanny-learndash-toolkit/wordpress-uncanny-toolkit-for-learndash-plugin-3-6-4-3-open-redirection-vulnerability
+    - https://wordpress.org/plugins/uncanny-learndash-toolkit/
+  metadata:
+    max-request: 1
+    verified: true
+    publicwww-query: "/wp-content/plugins/uncanny-learndash-toolkit/"
+  tags: cve,cve2023,wordpress,uncanny-learndash-toolkit,wpscan,redirect
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/?rest_route=/ult/v2/review-banner-visibility&action=maybe-later&redirect=yes&redirect_url=https://interact.sh"
+
+    matchers:
+      - type: regex
+        part: header
+        regex:
+          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'