CVE-2020-12259

MEDIUMNuclei

rConfig 3.9.4 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2020-12259 has a selected CVSS score of 5.4 (medium); EIP currently links 1 Nuclei template.

Description

rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the rid GET parameter of devicemgmnt.php.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMrConfig 3.9.4 - Cross-Site ScriptingCVSS 5.4

rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the rid GET parameter of devicemgmnt.php

Impact

Authenticated attackers can inject malicious JavaScript through the rid parameter, potentially stealing session cookies or performing administrative actions on behalf of authenticated users.

Remediation

Upgrade to rConfig version 3.9.7 or later.

WeaknessesCWE-79
Authorsr3Y3r53
Template tagscve2020cverconfigauthenticatedxssvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:rconfig:rconfig:3.9.4:*:*:*:*:*:*:*
Shodan: http.title:"rConfig"
Shodan: http.title:"rconfig"
FOFA: title="rconfig"
Google: intitle:"rconfig"
https://www.rconfig.com/downloads/rconfig-3.9.4.zip https://gist.github.com/farid007/8855031bad0e497264e4879efb5bc9f8 https://nvd.nist.gov/vuln/detail/CVE-2020-12259 https://github.com/ARPSyndicate/kenzer-templates https://github.com/Elsfa7-110/kenzer-templates

Source: ProjectDiscovery

References

2