Enhancement: cves/2021/CVE-2021-42567.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-02-28 13:05:03 -05:00
parent f2909c7bb9
commit 855a848fd0
1 changed files with 4 additions and 2 deletions

View File

@ -1,10 +1,10 @@
id: CVE-2021-42567
info:
name: Apereo CAS Reflected XSS
name: Apereo CAS Reflected Cross-Site Scripting
author: pdteam
severity: medium
description: Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.
description: Apereo CAS through 6.4.1 allows cross-site scripting via POST requests sent to the REST API endpoints.
reference:
- https://apereo.github.io/2021/10/18/restvuln/
- https://www.sudokaikan.com/2021/12/exploit-cve-2021-42567-post-based-xss.html
@ -40,3 +40,5 @@ requests:
- type: status
status:
- 401
# Enhanced by mp on 2022/02/28