CVE-2022-29548

MEDIUMNuclei

WSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-29548 has a selected CVSS score of 4.6 (medium); EIP currently links 1 catalogued exploit, 1 repository PoC, and 1 Nuclei template.

Description

A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0, 6.5.0, and 6.6.0; IS as Key Manager 5.5.0, 5.6.0, 5.7.0, 5.9.0, and 5.10.0; Identity Server 5.5.0, 5.6.0, 5.7.0, 5.9.0, 5.10.0, and 5.11.0; Identity Server Analytics 5.5.0 and 5.6.0; and WSO2 Micro Integrator 1.0.0.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Repository PoCs
1
Nuclei templates
1

Proofs of concept

2

Catalogued exploits

ExploitDBWSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS)ExploitDB exploitby cxosmoNot analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitHubcxosmo/CVE-2022-29548Repository PoCby cxosmo5Not analyzed2 files

3.9 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMWSO2 - Cross-Site ScriptingCVSS 6.1

WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0, 6.5.0, and 6.6.0; IS as Key Manager 5.5.0, 5.6.0, 5.7.0, 5.9.0, and 5.10.0; Identity Server 5.5.0, 5.6.0, 5.7.0, 5.9.0, 5.10.0, and 5.11.0; Identity Server Analytics 5.5.0 and 5.6.0; and WSO2 Micro Integrator 1.0.0.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the victim's browser, leading to potential data theft, session hijacking, or defacement of the affected application.

Remediation

Apply the latest security patches or updates provided by WSO2 to fix the XSS vulnerability.

WeaknessesCWE-79
Authorsedoardottt
Template tagscvecve2022wso2xsspacketstormvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:wso2:api_manager:2.2.0:*:*:*:*:*:*:*
Shodan: http.favicon.hash:1398055326
FOFA: icon_hash=1398055326
Google: inurl:"carbon/admin/login"
https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1603 https://nvd.nist.gov/vuln/detail/CVE-2022-29548 http://packetstormsecurity.com/files/167587/WSO2-Management-Console-Cross-Site-Scripting.html https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2022/WSO2-2021-1603/ https://github.com/vishnusomank/GoXploitDB

Source: ProjectDiscovery

References

4