Microweber < 1.2.11 - Open Redirection

ID: CVE-2022-0597

Severity: medium

Author: Farish

Tags: cve,cve2022,huntr,microweber,redirect,oss

Description

Open Redirect in Packagist microweber/microweber prior to 1.2.11.

YAML Source

id: CVE-2022-0597

info:
  name: Microweber < 1.2.11 - Open Redirection
  author: Farish
  severity: medium
  description: |
    Open Redirect in Packagist microweber/microweber prior to 1.2.11.
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2022-0597
    - https://huntr.dev/bounties/68c22eab-cc69-4e9f-bcb6-2df3db626813/
    - https://www.mend.io/vulnerability-database/CVE-2022-0597
    - https://github.com/microweber/microweber/commit/acfc6a581d1ea86096d1b0ecd8a0eec927c0e9b2
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    cvss-score: 6.1
    cve-id: CVE-2022-0597
    cwe-id: CWE-601
    epss-score: 0.00115
    epss-percentile: 0.45018
    cpe: cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: microweber
    product: microweber
    shodan-query:
      - http.favicon.hash:780351152
      - http.html:"microweber"
    fofa-query:
      - body="microweber"
      - icon_hash=780351152
  tags: cve,cve2022,huntr,microweber,redirect,oss

http:
  - method: GET
    path:
      - "{{BaseURL}}/api/logout?redirect_to=http://oast.pro/"

    matchers:
      - type: regex
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)oast\.pro.*$'
        part: header
# digest: 4a0a00473045022100dc4ba630b9c6dbc012d546683498523adce29965e0d8e96fa894ce39bd897712022033a9f1467f56905b5f0dd3a2efd0d77082018b6498d536339a6cf2a51d4d427e:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2022/CVE-2022-0597.yaml"

View on Github