daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updated CVE-2022-0678 Template

patch-1
Co5mos 2023-05-04 20:37:18 +08:00
parent eaa01134b2
commit c76b0a862a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
http/cves/2022/CVE-2022-0678.yaml
View File

@ -1,8 +1,8 @@
id: CVE-2022-0678
info:
name: Packagist <1.2.11 - Cross-Site Scripting
author: tess
name: Microweber <1.2.11 - Cross-Site Scripting
author: tess,co5mos
severity: medium
description: |
Packagist prior to 1.2.11 contains a cross-site scripting vulnerability via microweber/microweber. User can escape the meta tag because the user doesn't escape the double-quote in the $redirectUrl parameter when logging out.