daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enhancement: cves/2021/CVE-2021-42567.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-02-28 13:05:03 -05:00
parent f2909c7bb9
commit 855a848fd0
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cves/2021/CVE-2021-42567.yaml
View File

@ -1,10 +1,10 @@
id: CVE-2021-42567 id: CVE-2021-42567
info: info:
name: Apereo CAS Reflected XSS name: Apereo CAS Reflected Cross-Site Scripting
author: pdteam author: pdteam
severity: medium severity: medium
description: Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints. description: Apereo CAS through 6.4.1 allows cross-site scripting via POST requests sent to the REST API endpoints.
reference: reference:
- https://apereo.github.io/2021/10/18/restvuln/ - https://apereo.github.io/2021/10/18/restvuln/
- https://www.sudokaikan.com/2021/12/exploit-cve-2021-42567-post-based-xss.html - https://www.sudokaikan.com/2021/12/exploit-cve-2021-42567-post-based-xss.html
@ -40,3 +40,5 @@ requests:
- type: status - type: status
status: status:
- 401 - 401
# Enhanced by mp on 2022/02/28