.. / CVE-2020-9425

• Info Disclosure
• Nuclei
• Web

Exploit for rConfig <3.9.4 - Sensitive Information Disclosure (CVE-2020-9425)

Description:

rConfig prior to version 3.9.4 is susceptible to sensitive information disclosure. An unauthenticated attacker can retrieve saved cleartext credentials via a GET request to settings.php. Because the application does not exit after a redirect is applied, the rest of the page still executes, resulting in the disclosure of cleartext credentials in the response.

Nuclei Template

View the template here CVE-2020-9425.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-9425.yaml

References: