diff --git a/cves/2021/CVE-2021-29484.yaml b/cves/2021/CVE-2021-29484.yaml new file mode 100644 index 0000000000..ecbb8b9ac4 --- /dev/null +++ b/cves/2021/CVE-2021-29484.yaml @@ -0,0 +1,30 @@ +id: CVE-2021-29484 + +info: + name: DOM XSS in Ghost CMS + author: rootxharsh, iamnoooob + severity: medium + tags: ghost + reference: https://github.com/TryGhost/Ghost/security/advisories/GHSA-9fgx-q25h-jxrg + +requests: + - raw: + - | + GET /ghost/preview HTTP/1.1 + {{Hostname}} + + matchers-condition: and + matchers: + - type: word + words: + - 'XMLHttpRequest.prototype.open' + part: body + + - type: word + words: + - 'text/html' + part: header + + - type: status + status: + - 200