diff --git a/.nuclei-ignore b/.nuclei-ignore index 32e6f022f1..207ece0f9c 100644 --- a/.nuclei-ignore +++ b/.nuclei-ignore @@ -13,6 +13,7 @@ tags: - "iot" - "misc" - "fuzz" + - "revision" # files is a list of files to ignore template execution # unless asked for by the user. \ No newline at end of file diff --git a/vulnerabilities/moodle/moodle-jitsi-plugin-xss.yaml b/vulnerabilities/moodle/moodle-jitsi-plugin-xss.yaml index 3b5133b47f..00843f0d3f 100644 --- a/vulnerabilities/moodle/moodle-jitsi-plugin-xss.yaml +++ b/vulnerabilities/moodle/moodle-jitsi-plugin-xss.yaml @@ -5,13 +5,13 @@ info: author: aceseven (digisec360) description: Cross-site Scripting in moodle jitsi plugin severity: medium - tags: moodle,jitsi,xss + tags: moodle,jitsi,xss,revision reference: https://github.com/udima-university/moodle-mod_jitsi/issues/67 requests: - method: GET path: - - "{{BaseURL}}/mod/jitsi/sessionpriv.php?avatar=https%3A%2F%2Ftargetdomain.com%2Fuser%2Fpix.php%2F498%2Ff1.jpg&nom=test_user%27)%3balert(document.domain)%3b//&ses=test_user&t=1" + - "{{BaseURL}}/mod/jitsi/sessionpriv.php?avatar=https%3A%2F%2F{{Hostname}}%2Fuser%2Fpix.php%2F498%2Ff1.jpg&nom=test_user%27)%3balert(document.domain)%3b//&ses=test_user&t=1" matchers-condition: and matchers: