Merge pull request #1823 from Akokonunes/patch-14

Create CVE-2021-24406.yaml

cves/2021/CVE-2021-24406.yaml

@@ -0,0 +1,20 @@
+id: CVE-2021-24406
+
+info:
+  name: wpForo Forum < 1.9.7 - Open Redirect
+  author: 0x_Akoko
+  description: The plugin did not validate the redirect_to parameter in the login form of the forum, leading to an open redirect issue after a successful login.
+  reference: https://wpscan.com/vulnerability/a9284931-555b-4c96-86a3-09e1040b0388
+  severity: low
+  tags: wordpress,redirect,cve,cve2021
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/community/?foro=signin&redirect_to=https://example.com/"
+
+    matchers:
+      - type: regex
+        regex:
+          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_\.@]*)example\.com.*$'
+        part: header