CVE-2021-25118

MEDIUMNuclei

Yoast SEO 16.7-17.2 - Unauthenticated Full Path Disclosure

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-25118 has a selected CVSS score of 5.3 (medium); EIP currently links 1 Nuclei template.

Description

The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

Yoast SEO

CVE List16.7 to < 16.7*affected
17.3 to < 17.3affected

Nuclei templates

1
ProjectDiscoveryMEDIUMYoast SEO 16.7-17.2 - Information DisclosureCVSS 5.3

Yoast SEO plugin 16.7 to 17.2 is susceptible to information disclosure, The plugin discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints, which can help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.

Impact

An attacker can exploit this vulnerability to gain sensitive information from the target system.

Remediation

Fixed in version 17.3.

WeaknessesCWE-200
AuthorsDhiyaneshDK
Template tagscve2021cvewpscanwordpresswp-pluginfpdwpyoastvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CPE: cpe:2.3:a:yoast:yoast_seo:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/2c3f9038-632d-40ef-a099-6ea202efb550 https://plugins.trac.wordpress.org/changeset/2608691 https://nvd.nist.gov/vuln/detail/CVE-2021-25118 https://github.com/20142995/sectool https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

3