CVE-2021-35488

MEDIUMNuclei

Thruk 2.40-2 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2021-35488 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMThruk 2.40-2 - Cross-Site ScriptingCVSS 6.1

Thruk 2.40-2 contains a cross-site scripting vulnerability via /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] in the host or title parameter. An attacker can inject arbitrary JavaScript into status.cgi, leading to a triggered payload when accessed by an authenticated user.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to potential session hijacking, defacement, or theft of sensitive information.

Remediation

Upgrade to a patched version of Thruk or apply the vendor-supplied patch to mitigate this vulnerability.

WeaknessesCWE-79
Authorsarafatansari
Template tagscve2021cvethrukxssvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:thruk:thruk:2.40-2:*:*:*:*:*:*:*
Shodan: http.html:"Thruk"
Shodan: http.html:"thruk"
FOFA: body="thruk"
FOFA: title=="thruk monitoring webinterface"
https://www.gruppotim.it/redteam https://www.thruk.org/changelog.html https://nvd.nist.gov/vuln/detail/CVE-2021-35488 https://github.com/ARPSyndicate/cvemon https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

3