daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2018/CVE-2018-9845.yaml

50 lines
1.5 KiB
YAML
Raw Normal View History

fixed invalid template syntax
2021-10-30 11:17:35 +00:00
id: CVE-2018-9845
Create CVE-2018–9845.yaml
2021-09-24 02:18:41 +00:00
info:
Dashboard Content Enhancements (#4411) * standardizing enhanced by tag * Fix spacing. Add classification->cve * Enhancement: cves/2021/CVE-2021-20158.yaml by mp * Enhancement: cves/2021/CVE-2021-20167.yaml by mp * Typo * Enhancement: cves/2021/CVE-2021-20837.yaml by mp * Enhancement: cves/2021/CVE-2021-21307.yaml by mp * Enhancement: cves/2021/CVE-2021-21479.yaml by mp * Enhancement: cves/2021/CVE-2021-21881.yaml by mp * Enhancement: cves/2021/CVE-2021-21972.yaml by mp * Enhancement: cves/2021/CVE-2021-21978.yaml by mp * Enhancement: cves/2021/CVE-2021-22005.yaml by mp * Enhancement: cves/2021/CVE-2021-22205.yaml by mp * Enhancement: cves/2021/CVE-2021-22986.yaml by mp * Enhancement: cves/2021/CVE-2021-24285.yaml by mp * Enhancement: cves/2021/CVE-2021-24472.yaml by mp * Enhancement: cves/2021/CVE-2021-20090.yaml by mp * Enhancement: cves/2021/CVE-2021-20167.yaml by mp * Enhancement: cves/2021/CVE-2021-21307.yaml by mp * Enhancement: cves/2021/CVE-2021-21978.yaml by mp * Enhancement: cves/2021/CVE-2021-21985.yaml by mp * Enhancement: cves/2021/CVE-2021-21972.yaml by mp * Enhancement: cves/2021/CVE-2021-22205.yaml by mp * Enhancement: cves/2021/CVE-2021-22986.yaml by mp * Enhancement: cves/2021/CVE-2021-24285.yaml by mp * Restore empty lines * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Remove unnecessary file * Restore content after bad dashboard edit * Enhancement: undefined by cs * Spacing issues * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: undefined by cs * Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs * Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs * Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs * Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs * Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs * Delete null file created by dashboard * Remove improper Enhanced tag * Spacing issues * Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs * Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs * Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs * Remove test dashboard commits * Enhancement: cves/2014/CVE-2014-9618.yaml by mp * Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs * Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs * Not really enhanced * Add classification->cve-id * Restore content from dashboard mess up * Enhancement: cves/2014/CVE-2014-9618.yaml by mp * Enhancement: cves/2014/CVE-2014-9618.yaml by mp * Restore newlines * Enhancement: cves/2007/CVE-2007-4556.yaml by mp * Enhancement: cves/2007/CVE-2007-4556.yaml by mp * Enhancement: cves/2014/CVE-2014-9618.yaml by mp * Enhancement: cves/2015/CVE-2015-1427.yaml by mp * Enhancement: cves/2015/CVE-2015-3224.yaml by mp * Enhancement: cves/2015/CVE-2015-7450.yaml by mp * Enhancement: cves/2016/CVE-2016-10134.yaml by mp * Enhancement: cves/2016/CVE-2016-1555.yaml by mp * Enhancement: cves/2016/CVE-2016-2004.yaml by mp * Enhancement: cves/2016/CVE-2016-5649.yaml by mp * Enhancement: cves/2016/CVE-2016-7552.yaml by mp * Enhancement: cves/2017/CVE-2017-1000486.yaml by mp * Enhancement: cves/2017/CVE-2017-11444.yaml by mp * Spacing issues * Added better reference * Enhancement: cves/2017/CVE-2017-12149.yaml by mp * Enhancement: cves/2017/CVE-2017-12542.yaml by mp * Enhancement: cves/2017/CVE-2017-12611.yaml by mp * Enhancement: cves/2017/CVE-2017-12635.yaml by mp * Enhancement: cves/2017/CVE-2017-14135.yaml by mp * Enhancement: cves/2017/CVE-2017-3881.yaml by mp * Enhancement: cves/2017/CVE-2017-7269.yaml by mp * Enhancement: cves/2017/CVE-2017-8917.yaml by mp * Enhancement: cves/2017/CVE-2017-9791.yaml by mp * Enhancement: cves/2015/CVE-2015-1427.yaml by mp * Enhancement: cves/2017/CVE-2017-12149.yaml by mp * Enhancement: cves/2017/CVE-2017-12542.yaml by mp * Enhancement: cves/2017/CVE-2017-8917.yaml by mp * Spacing and other minor issues * Update CVE-2015-1427.yaml * Update CVE-2017-12149.yaml * Update CVE-2017-12542.yaml * Update CVE-2017-12635.yaml * Update CVE-2017-14135.yaml * Update CVE-2017-3881.yaml * Update CVE-2017-7269.yaml * Update CVE-2017-8917.yaml * Update CVE-2017-9791.yaml * Enhancement: cnvd/2019/CNVD-2019-19299.yaml by mp * Enhancement: cnvd/2019/CNVD-2019-32204.yaml by mp * Enhancement: cnvd/2020/CNVD-2020-68596.yaml by mp * Enhancement: cnvd/2021/CNVD-2021-09650.yaml by mp * Enhancement: cnvd/2021/CNVD-2021-26422.yaml by mp * Enhancement: cnvd/2022/CNVD-2022-03672.yaml by mp * Enhancement: cves/2017/CVE-2017-9841.yaml by mp * Enhancement: cves/2018/CVE-2018-0127.yaml by mp * Enhancement: cves/2018/CVE-2018-1000226.yaml by mp * Enhancement: cves/2018/CVE-2018-1000861.yaml by mp * Enhancement: cves/2018/CVE-2018-10562.yaml by mp * Enhancement: cves/2018/CVE-2018-12031.yaml by mp * Enhancement: cves/2018/CVE-2018-1207.yaml by mp * Enhancement: cves/2018/CVE-2018-12634.yaml by mp * Enhancement: cves/2018/CVE-2018-1273.yaml by mp * Enhancement: cves/2018/CVE-2018-16763.yaml by mp * Enhancement: cves/2018/CVE-2018-16167.yaml by mp * Enhancement: cves/2018/CVE-2018-14916.yaml by mp * Enhancement: cves/2018/CVE-2018-14064.yaml by mp * Enhancement: cves/2018/CVE-2018-13379.yaml by mp * Enhancement: cves/2017/CVE-2017-9841.yaml by mp * Enhancement: cves/2018/CVE-2018-1000861.yaml by mp * Enhancement: cves/2018/CVE-2018-10562.yaml by mp * Enhancement: cves/2018/CVE-2018-12031.yaml by mp * Enhancement: cves/2018/CVE-2018-1207.yaml by mp * Enhancement: cves/2018/CVE-2018-12634.yaml by mp * Enhancement: cves/2018/CVE-2018-13379.yaml by mp * Enhancement: cves/2018/CVE-2018-14916.yaml by mp * Enhancement: cves/2018/CVE-2018-16167.yaml by mp * Enhancement: cves/2018/CVE-2018-16763.yaml by mp * Cleanup and spacing * Remove blank cve-id lines * Enhancement: cves/2018/CVE-2018-16836.yaml by mp * Enhancement: cves/2018/CVE-2018-17246.yaml by mp * Enhancement: cves/2018/CVE-2018-17431.yaml by mp * Enhancement: cves/2018/CVE-2018-18925.yaml by mp * Enhancement: cves/2018/CVE-2018-20985.yaml by mp * Enhancement: cves/2018/CVE-2018-2894.yaml by mp * Enhancement: cves/2018/CVE-2018-3810.yaml by mp * Enhancement: cves/2018/CVE-2018-7600.yaml by mp * Enhancement: cves/2018/CVE-2018-7600.yaml by mp * Enhancement: cves/2018/CVE-2018-7602.yaml by mp * Enhancement: cves/2018/CVE-2018-9161.yaml by mp * Enhancement: cves/2018/CVE-2018-16836.yaml by mp * Enhancement: cves/2018/CVE-2018-17431.yaml by mp * Many title clean-ups for more standardization. Some vendor name clean-up * Enhancement: cves/2018/CVE-2018-20985.yaml by mp * Enhancement: cves/2018/CVE-2018-3810.yaml by mp * Spacing issues * Remove 2 blank newlines * Enhancement: vulnerabilities/other/tamronos-rce.yaml by cs * Enhancement: cves/2018/CVE-2018-9845.yaml by mp * Enhancement: cves/2018/CVE-2018-9995.yaml by mp * Enhancement: cves/2019/CVE-2019-0230.yaml by mp * Enhancement: cves/2019/CVE-2019-16920.yaml by mp * Enhancement: cves/2019/CVE-2019-17270.yaml by mp * Enhancement: cves/2019/CVE-2019-17382.yaml by mp * Enhancement: cves/2019/CVE-2019-17444.yaml by mp * Enhancement: cves/2019/CVE-2019-17506.yaml by mp * Enhancement: cves/2020/CVE-2020-10148.yaml by mp * Enhancement: cves/2020/CVE-2020-11710.yaml by mp * Enhancement: cves/2020/CVE-2020-11854.yaml by mp * Enhancement: cves/2020/CVE-2020-12800.yaml by mp * Enhancement: cves/2020/CVE-2020-13117.yaml by mp * Enhancement: cves/2020/CVE-2020-13167.yaml by mp * Enhancement: cves/2020/CVE-2020-13927.yaml by mp * Enhancement: cves/2020/CVE-2020-13942.yaml by mp * Spacing, syntax error * Spacing, correct this time. * Enhancement: cves/2020/CVE-2020-15920.yaml by mp * Enhancement: cves/2020/CVE-2020-29227.yaml by mp * Enhancement: cves/2021/CVE-2021-24499.yaml by mp * Enhancement: cves/2021/CVE-2021-24762.yaml by mp * Enhancement: cves/2018/CVE-2018-9995.yaml by mp * Enhancement: cves/2019/CVE-2019-0230.yaml by mp * Enhancement: cves/2019/CVE-2019-17444.yaml by mp * Enhancement: cves/2020/CVE-2020-10148.yaml by mp * Enhancement: cves/2020/CVE-2020-11854.yaml by mp * Enhancement: cves/2020/CVE-2020-13167.yaml by mp * Enhancement: cves/2020/CVE-2020-13927.yaml by mp * Enhancement: cves/2020/CVE-2020-15920.yaml by mp * Enhancement: cves/2021/CVE-2021-24499.yaml by mp * Extra newlines and one sp;acing issue * Update CVE-2018-9995.yaml * Update CVE-2019-0230.yaml * Update CVE-2019-16920.yaml * Update CVE-2019-17270.yaml * Update CVE-2019-17382.yaml * Update CVE-2019-17444.yaml * Update CVE-2019-17506.yaml * Update CVE-2020-10148.yaml * Update CVE-2020-11710.yaml * Update CVE-2020-11854.yaml * Update CVE-2020-12800.yaml * Update CVE-2020-13167.yaml * Update CVE-2020-13927.yaml * Update CVE-2020-13942.yaml * Update CVE-2020-15920.yaml * Update CVE-2020-29227.yaml * Update CVE-2021-24499.yaml * Update CVE-2021-24762.yaml Co-authored-by: sullo <sullo@cirt.net> Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2022-05-17 09:11:26 +00:00
name: Etherpad Lite <1.6.4 - Admin Authentication Bypass
Create CVE-2018–9845.yaml
2021-09-24 02:18:41 +00:00
author: philippedelteil
severity: critical
Add description
2021-10-27 11:07:22 +00:00
description: Etherpad Lite before 1.6.4 is exploitable for admin access.
updated 2018 CVEs
2023-09-06 12:57:14 +00:00
remediation: |
Upgrade to Etherpad Lite version 1.6.4 or later to fix the vulnerability.
Create CVE-2018–9845.yaml
2021-09-24 02:18:41 +00:00
reference:
- https://infosecwriteups.com/account-takeovers-believe-the-unbelievable-bb98a0c251a4
- https://github.com/ether/etherpad-lite/commit/ffe24c3dd93efc73e0cbf924db9a0cc40be9511b
Update CVE-2018–9845.yaml
2021-09-24 09:35:45 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2018-9845
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
- https://github.com/ether/etherpad-lite/blob/develop/CHANGELOG.md
Create CVE-2018–9845.yaml
2021-09-24 02:18:41 +00:00
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2018-9845
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
cwe-id: CWE-178
templateman update
2023-10-14 11:27:55 +00:00
epss-score: 0.01393
TemplateMan Update [Tue Dec 12 11:07:51 UTC 2023] :robot:
2023-12-12 11:07:52 +00:00
epss-percentile: 0.84885
updated 2018 CVEs
2023-09-06 12:57:14 +00:00
cpe: cpe:2.3:a:etherpad:etherpad_lite:*:*:*:*:*:*:*:*
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
vendor: etherpad
product: etherpad_lite
tags: cve,cve2018,etherpad,auth-bypass
Create CVE-2018–9845.yaml
2021-09-24 02:18:41 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create CVE-2018–9845.yaml
2021-09-24 02:18:41 +00:00
- method: GET
path:
- "{{BaseURL}}/Admin"
Update CVE-2018–9845.yaml
2021-09-24 09:35:21 +00:00
Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491)
2022-10-07 21:27:25 +00:00
host-redirects: true
Update CVE-2018–9845.yaml
2021-09-24 10:14:02 +00:00
max-redirects: 2
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
Create CVE-2018–9845.yaml
2021-09-24 02:18:41 +00:00
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Etherpad version"
- "Plugin manager"
Update CVE-2018–9845.yaml
2021-09-24 09:35:21 +00:00
- "Installed parts"
condition: and
Create CVE-2018–9845.yaml
2021-09-24 02:18:41 +00:00
- type: status
status:
- 200
Auto Template Signing [Tue Dec 12 12:02:03 UTC 2023] :robot:
2023-12-12 12:02:03 +00:00
# digest: 4a0a00473045022100f9c89a6a51c1528e1b41934d85e6840016195cc1ff69081aa8b6c8503c14757d02200b1db7aa0ce4f629407b082634917431822a68ec44ed8bfce65f1e6fe4d3f674:922c64590222798bb761d5b6d8e72950