Mars: Jolokia Reflected XSS

2022-09-2717:29:15

ramzanrl

hackerone.com

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.0%

JSON

Summary:

(salam)
Hi team i hope you are well , after doing some recon on mars.com i saw that the website use jolkia 1.3.5 it’s vulnerable to reflected XSS

Steps To Reproduce:

Vuln Link : https://couponsmanager-uat.b2b.mars.com/jolokia/read<svg onload=alert(document.cookie)>?mimeType=text/html

Supporting Material/References:

CVE-2018-1000129

Jolkia - Version
{F1957663}

##POC

{F1957668}

Impact

If an attacker can control a script that is executed in the victim’s browser, then they can typically fully compromise that user. Amongst other things, the attacker can:
Perform any action within the application that the user can perform.
View any information that the user is able to view.
Modify any information that the user is able to modify.
Initiate interactions with other application users, including malicious attacks, that will appear to originate from the initial victim user.