Skip to content
Nuclei Templates

Open Journal Systems pkp-lib - Open Redirect

ID: pkp-lib-open-redirect

Severity: medium

Author: ritikchaddha

Tags: pkp,ojs,open-journal-system,pkp-lib,redirect

Description

Section titled “Description”

Public Knowledge Project pkp-lib is vulnerable to Open redirect due to a lack of input sanitization in the setLocale function.

YAML Source

Section titled “YAML Source”
id: pkp-lib-open-redirect


info:
  name: Open Journal Systems pkp-lib - Open Redirect
  author: ritikchaddha
  severity: medium
  description: |
    Public Knowledge Project pkp-lib is vulnerable to Open redirect due to a lack of input sanitization in the setLocale function.
  reference:
    - https://github.com/pkp/pkp-lib/issues/7575
  classification:
    cpe: cpe:2.3:a:public_knowledge_project:open_journal_systems:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: public_knowledge_project
    product: open_journal_systems
    fofa-query: body="pkp-lib"
  tags: pkp,ojs,open-journal-system,pkp-lib,redirect


http:
  - method: GET
    path:
      - "{{BaseURL}}/index.php/index/user/setLocale/[email protected]"


    matchers:
      - type: regex
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*){{Hostname}}@?(?:[a-zA-Z0-9\-_\.@]*)oast\.me\/?(\/|[^.].*)?$'
# digest: 4a0a0047304502206f7c2a55023e27e8d5b8017b9af1487fa60a457332f3de1772a0a52f44844e36022100def384ea2602620751e108152dc6f80e18253d8b8a6d926fc895b4ca8799e46b:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/vulnerabilities/pkp-lib-open-redirect.yaml"

View on Github