CVE-2021-25118 Yoast SEO 16.7-17.2 - Unauthenticated Full Path Disclosure
Unauthenticated attackers can retrieve full internal file paths of featured images via REST endpoints, aiding further exploitation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-25118?
CVE-2021-25118 is a medium-severity vulnerability in Unknown Yoast SEO, published on 28 Feb 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.
Weakness: CWE-200
Which versions are affected by CVE-2021-25118?
It affects 1 product.
Products include Yoast Yoast Seo.
How do I fix CVE-2021-25118?
No fix has been published for CVE-2021-25118 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-25118 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-25118 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Unknown Yoast SEO
- CVE-2019-13478 Cross-site scripting in n/a
- CVE-2023-32300 WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2018-19370 Race condition in n/a
- CVE-2023-28785 WordPress Yoast SEO: Local Plugin <= 14.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2021-31779 Server-Side Request Forgery in yoast_seo
Sources
Also known as GHSA-946c-79cp-58mf.