nuclei-templates/cves/2020/CVE-2020-5777.yaml

36 lines
1.1 KiB
YAML

id: CVE-2020-5777
info:
name: Magento Mass Importer <0.7.24 - Remote Auth Bypass
author: dwisiswant0
severity: critical
description: "Magento Mass Importer (aka MAGMI) versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure."
reference:
- https://github.com/dweeves/magmi-git/blob/18bd9ec905c90bfc9eaed0c2bf2d3525002e33b9/magmi/inc/magmi_auth.php#L35
- https://nvd.nist.gov/vuln/detail/CVE-2020-5777
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2020-5777
cwe-id: CWE-287
tags: cve,cve2020,magmi,magento,auth,bypass,plugin
requests:
- raw:
- |
GET /index.php/catalogsearch/advanced/result/?name=e HTTP/1.1
Host: {{Hostname}}
Connection: close
matchers-condition: and
matchers:
- type: word
words:
- "Too many connections"
part: body
- type: status
status:
- 503
# Enhanced by mp on 2022/04/28