Exploitation Summary
EIP tracks 2 public exploits for CVE-2023-0214. PoCs published by RedTeam Pentesting GmbH, 0pts.
AI-analyzed exploit summary The exploit details a Cross-Site Scripting (XSS) vulnerability in Secure Web Gateway 10.2.11, where attackers can inject arbitrary headers and body content via the 'p' parameter in the 'SetLoginToken' action, leading to XSS attacks. The PoC demonstrates header injection to return arbitrary HTML/JavaScript content.
Description
A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitrary content to be injected into the response when accessed through SWG.
Exploits (2)
The exploit details a Cross-Site Scripting (XSS) vulnerability in Secure Web Gateway 10.2.11, where attackers can inject arbitrary headers and body content via the 'p' parameter in the 'SetLoginToken' action, leading to XSS attacks. The PoC demonstrates header injection to return arbitrary HTML/JavaScript content.
This repository contains a functional proof-of-concept exploit for CVE-2023-0214, an HTTP Response Splitting vulnerability in Skyhigh Secure Web Gateway (formerly McAfee Web Gateway). The exploit leverages improper handling of URL parameters to inject arbitrary HTTP headers and HTML/JavaScript payloads.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N