CVE-2020-11515
MEDIUM EXPLOITED NUCLEIRank Math SEO < 1.0.40.2 - Unauthenticated Arbitrary URI Creation via rankmath/v1/updateRedirection Endpoint
Title source: llmExploitation Summary
CVE-2020-11515 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including halilkirazkaya. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains a functional PoC for CVE-2020-11515, demonstrating how unauthenticated attackers can exploit the Rank Math WordPress plugin's unsecured REST API endpoint to create arbitrary redirects. The PoC includes a crafted HTTP POST request to the vulnerable endpoint, allowing the creation of new URIs that redirect to external sites.
Description
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an "Open Redirect" issue; instead, it allows the attacker to create a new URI with an arbitrary name (e.g., the /exampleredirect URI).
Exploits (1)
The repository contains a functional PoC for CVE-2020-11515, demonstrating how unauthenticated attackers can exploit the Rank Math WordPress plugin's unsecured REST API endpoint to create arbitrary redirects. The PoC includes a crafted HTTP POST request to the vulnerable endpoint, allowing the creation of new URIs that redirect to external sites.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N