Update CVE-2022-43015.yaml

patch-1
Dhiyaneshwaran 2022-10-25 02:17:07 +05:30 committed by GitHub
parent 5955a1e693
commit f3c6ac7731
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 5 deletions

View File

@ -8,7 +8,11 @@ info:
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the entriesPerPage parameter.
reference:
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43015
tags: xss,cve,2022
- https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_entriesPerPage.md
metadata:
verified: true
shodan-query: title:"OpenCATS"
tags: cve,cve2022,xss,opencats
requests:
- raw:
@ -28,10 +32,18 @@ requests:
cookie-reuse: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- '<script>alert(document.domain)</script>'
- 'CATS='
condition: and
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200
- type: word
words:
- '<script>alert(document.cookie)</script>'