Update and rename ultimatemember-plugin-open-redirect.yaml to vulnerabilities/wordpress/ultimatemember-open-redirect.yaml

patch-1
Prince Chaddha 2021-10-06 10:59:48 +05:30 committed by GitHub
parent 64a7c7b978
commit 183af8b95b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions

View File

@ -1,11 +1,11 @@
id: ultimatemember-plugin-open-redirect
id: ultimatemember-open-redirect
info:
name: Ultimate Member < 2.1.7 - Unauthenticated Open Redirect
author: 0x_Akoko
reference: https://wpscan.com/vulnerability/97823f41-7614-420e-81b8-9e735e4c203f
severity: medium
tags: wp,redirect,wordpress
reference: https://wpscan.com/vulnerability/97823f41-7614-420e-81b8-9e735e4c203f
tags: wp-plugin,redirect,wordpress
requests:
- method: GET
@ -15,5 +15,5 @@ requests:
matchers:
- type: regex
regex:
- '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_\.@]*)example\.com.*$'
- '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)example\.com.*$'
part: header