漏洞描述
Yoast SEO plugin 16.7 to 17.2 is susceptible to information disclosure, The plugin discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints, which can help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
wpscan.comhttps://wpscan.com/vulnerability/2c3f9038-632d-40ef-a099-6ea202efb550↗plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/changeset/2608691↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-25118↗github.comhttps://github.com/20142995/sectool↗github.comhttps://github.com/ARPSyndicate/cvemon↗