Create ultimatemember-plugin-open-redirect.yaml

2021-10-06 08:49:24 +09:00 · 2021-10-06 08:49:24 +09:00 · 64a7c7b978
parent b327939d61
commit 64a7c7b978
1 changed files with 19 additions and 0 deletions
--- a/ultimatemember-plugin-open-redirect.yaml
+++ b/ultimatemember-plugin-open-redirect.yaml
@ -0,0 +1,19 @@
+id: ultimatemember-plugin-open-redirect
+
+info:
+  name: Ultimate Member < 2.1.7 - Unauthenticated Open Redirect
+  author: 0x_Akoko
+  reference: https://wpscan.com/vulnerability/97823f41-7614-420e-81b8-9e735e4c203f
+  severity: medium
+  tags: wp,redirect,wordpress
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/register/?redirect_to=https://example.com/"
+
+    matchers:
+      - type: regex
+        regex:
+          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_\.@]*)example\.com.*$'
+        part: header