nuclei-templates/http/cves/2023/CVE-2023-27292.yaml

57 lines
2.0 KiB
YAML

id: CVE-2023-27292
info:
name: OpenCATS - Open Redirect
author: r3Y3r53
severity: medium
description: |
OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations.
impact: |
An attacker can redirect users to malicious websites, leading to phishing attacks or the download of malware.
remediation: |
Apply the latest patch or update to the latest version of OpenCATS to fix the open redirect vulnerability.
reference:
- https://www.tenable.com/security/research/tra-2023-8
- https://nvd.nist.gov/vuln/detail/CVE-2023-27292
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
cvss-score: 5.4
cve-id: CVE-2023-27292
cwe-id: CWE-601
epss-score: 0.00081
epss-percentile: 0.33897
cpe: cpe:2.3:a:opencats:opencats:0.9.6:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
vendor: opencats
product: opencats
shodan-query: title:"opencats"
tags: cve2023,cve,authenticated,tenable,opencats,redirect
http:
- raw:
- |
POST /index.php?m=login&a=attemptLogin HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
username={{username}}&password={{password}}
- |
GET /index.php?m=settings&a=previewPage&url=https://oast.me HTTP/1.1
Host: {{Hostname}}
host-redirects: true
matchers-condition: and
matchers:
- type: word
words:
- '<TITLE>Page Preview</TITLE>'
- '<FRAME src="https://oast.me">'
condition: and
- type: status
status:
- 200
# digest: 4b0a00483046022100adb3424267ebb98816052bb667727bca2ce395b4acde0a35b567ec19188842c40221009667ad4ea27eab4f73656c0553be9099a2bb8c872e0cdcfa8548be612a828409:922c64590222798bb761d5b6d8e72950