CVE-2023-0214

🗓️ 18 Jan 2023 10:49:16Reported by trellixType

cve🔗 web.nvd.nist.gov👁 41 Views🌐 WEB

A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitrary content to be injected into the response when accessed through SWG

Reporter	Title	Published	Views	Family All 12
0day.today	Secure Web Gateway 10.2.11 Cross Site Scripting Vulnerability	26 Jan 202300:00	–	zdt
0day.today	Secure Web Gateway 10.2.11 - Cross-Site Scripting Vulnerability	5 Apr 202300:00	–	zdt
Circl	CVE-2023-0214	3 Apr 202518:35	–	circl
CNNVD	McAfee Skyhigh Secure Web Gateway 跨站脚本漏洞	18 Jan 202300:00	–	cnnvd
Cvelist	CVE-2023-0214 XSS in Skyhigh Security SWG	18 Jan 202310:49	–	cvelist
Exploit DB	Secure Web Gateway 10.2.11 - Cross-Site Scripting (XSS)	5 Apr 202300:00	–	exploitdb
EUVD	EUVD-2023-12303	3 Oct 202520:07	–	euvd
NVD	CVE-2023-0214	18 Jan 202311:15	–	nvd
Packet Storm	Secure Web Gateway 10.2.11 Cross Site Scripting	26 Jan 202300:00	–	packetstorm
Prion	Cross site scripting	18 Jan 202311:15	–	prion

NVD

Node

trellix skyhigh_secure_web_gatewayRange10.0.0–10.2.17

trellix skyhigh_secure_web_gatewayRange11.0.0–11.2.6

trellix skyhigh_secure_web_gatewayMatch12.0.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Secure Web Gateway (SWG)",
    "vendor": "Skyhigh Security",
    "versions": [
      {
        "lessThan": "11.2.6",
        "status": "affected",
        "version": "11.x",
        "versionType": "custom"
      },
      {
        "lessThan": "10.2.17",
        "status": "affected",
        "version": "10.x",
        "versionType": "custom"
      },
      {
        "lessThan": "12.0.1",
        "status": "affected",
        "version": "12.x",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kcm	www.kcm.trellix.com/corporate/index

Parameter	Position	Path	Description	CWE
target	query param	/mwg-internal/de5fs23hu73ds/plugin?target=Ssos&action=SetLoginToken&v=v&c=c&p=p%0aContent-Type: text/html%0aContent-Length: 27%0a%0a<h1>RedTeam Pentesting</h1>	Cross-site scripting vulnerability in Skyhigh SWG where the p parameter can inject headers and body via the SetLoginToken endpoint, causing arbitrary content to be returned when accessed through SWG.	CWE-79
action	query param	/mwg-internal/de5fs23hu73ds/plugin?target=Ssos&action=SetLoginToken&v=v&c=c&p=p%0aContent-Type: text/html%0aContent-Length: 27%0a%0a<h1>RedTeam Pentesting</h1>	Cross-site scripting vulnerability in Skyhigh SWG where the p parameter can inject headers and body via the SetLoginToken endpoint, causing arbitrary content to be returned when accessed through SWG.	CWE-79
v	query param	/mwg-internal/de5fs23hu73ds/plugin?target=Ssos&action=SetLoginToken&v=v&c=c&p=p%0aContent-Type: text/html%0aContent-Length: 27%0a%0a<h1>RedTeam Pentesting</h1>	Cross-site scripting vulnerability in Skyhigh SWG where the p parameter can inject headers and body via the SetLoginToken endpoint, causing arbitrary content to be returned when accessed through SWG.	CWE-79
c	query param	/mwg-internal/de5fs23hu73ds/plugin?target=Ssos&action=SetLoginToken&v=v&c=c&p=p%0aContent-Type: text/html%0aContent-Length: 27%0a%0a<h1>RedTeam Pentesting</h1>	Cross-site scripting vulnerability in Skyhigh SWG where the p parameter can inject headers and body via the SetLoginToken endpoint, causing arbitrary content to be returned when accessed through SWG.	CWE-79
p	query param	/mwg-internal/de5fs23hu73ds/plugin?target=Ssos&action=SetLoginToken&v=v&c=c&p=p%0aContent-Type: text/html%0aContent-Length: 27%0a%0a<h1>RedTeam Pentesting</h1>	Cross-site scripting vulnerability in Skyhigh SWG where the p parameter can inject headers and body via the SetLoginToken endpoint, causing arbitrary content to be returned when accessed through SWG.	CWE-79

21 Nov 2024 07:36Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.03903

SSVC

CWE-79