CVE-2021-37598
published 2021-08-19CVE-2021-37598: WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.
PriorityP338medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EXPLOIT
EPSS
2.35%
81.6th percentile
WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| wpcerber | wp_cerber | < 8.9.3 | 8.9.3 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
WP Cerber < 8.9.3 - Broken Access Control
nuclei·CVSS 5.3
CVE-2021-37598 [MEDIUM] WP Cerber < 8.9.3 - Broken Access Control
WP Cerber < 8.9.3 - Broken Access Control
WP Cerber < 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'.
Template:
id: CVE-2021-37598
info:
name: WP Cerber < 8.9.3 - Broken Access Control
author: theamanrawat
severity: medium
description: |
WP Cerber < 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'.
impact: |
Unauthorized users can access protected REST API endpoints, potentially leading to information disclosure or further exploitation.
r
No writeups or analysis indexed.
2021-08-19
Published