daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #384 from ohlinge/master 

Fix bug about CVE-2018-1000129
patch-1
bauthard 2020-09-01 18:42:45 +05:30 committed by GitHub
parent 4914e39798 d1d679e04c
commit 23de5c8b44
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
cves/CVE-2018-1000129.yaml
View File

@ -2,7 +2,7 @@ id: CVE-2018-1000129
info: info:
name: Jolokia XSS name: Jolokia XSS
author: mavericknerd author: mavericknerd @0h1in9e
severity: high severity: high
description: An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser. description: An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.
@ -20,4 +20,8 @@ requests:
- type: word - type: word
words: words:
- "<svg onload=alert(document.domain)>" - "<svg onload=alert(document.domain)>"
part: body part: body
- type: word
words:
- "text/html"
part: header