{"vulnerability": "CVE-2022-2615", "sightings": [{"uuid": "838f008a-34cc-4fdd-83e7-fc354ec7c3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1577", "content": "CVE-2022-26159-Ametys-Autocompletion-XML\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 python \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0431\u0440\u043e\u0441\u0430 \u0432\u0441\u0435\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Ametys CMS, \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 sqlite.\nhttps://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-05-19T05:00:27.000000Z"}, {"uuid": "0c311e4c-15ab-42e1-a887-54979ba12422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/9317", "content": "https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML", "creation_timestamp": "2022-03-01T14:00:33.000000Z"}, {"uuid": "6f858540-db47-4c03-80d2-d3a43ff74591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26158", "type": "seen", "source": "https://t.me/cibsecurity/38177", "content": "\u203c CVE-2022-26158 \u203c\n\nAn issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. It accepts and reflects arbitrary domains supplied via a client-controlled Host header. Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-28T18:23:21.000000Z"}, {"uuid": "1faa0f2d-aa52-444b-b9c1-15ab642f34be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "seen", "source": "https://t.me/cibsecurity/38168", "content": "\u203c CVE-2022-26159 \u203c\n\nThe auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml (and similar pathnames for other languages), which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-28T07:22:54.000000Z"}, {"uuid": "b1f08fba-9716-48d9-9e26-5e8f21d330e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2615", "type": "seen", "source": "https://t.me/cibsecurity/48120", "content": "\u203c CVE-2022-2615 \u203c\n\nInsufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-13T00:34:01.000000Z"}, {"uuid": "ad934320-31d7-460c-a8fd-699eadd366fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26156", "type": "seen", "source": "https://t.me/cibsecurity/38178", "content": "\u203c CVE-2022-26156 \u203c\n\nAn issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. Injection of a malicious payload within the RelayState= parameter of the HTTP request body results in the hijacking of the form action. Form-action hijacking vulnerabilities arise when an application places user-supplied input into the action URL of an HTML form. An attacker can use this vulnerability to construct a URL that, if visited by another application user, will modify the action URL of a form to point to the attacker's server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-28T18:23:23.000000Z"}, {"uuid": "c113dbf0-bd6a-4e25-ba98-b66fe9cbe550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26155", "type": "seen", "source": "https://t.me/cibsecurity/38184", "content": "\u203c CVE-2022-26155 \u203c\n\nAn issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. XSS can occur via a payload in the SAMLResponse parameter of the HTTP request body.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-28T18:23:31.000000Z"}, {"uuid": "7da8ebb3-e44f-4b2a-9dfd-eeb2323fd416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26157", "type": "seen", "source": "https://t.me/cibsecurity/38181", "content": "\u203c CVE-2022-26157 \u203c\n\nAn issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The ASP.NET_Sessionid cookie is not protected by the Secure flag. This makes it prone to interception by an attacker if traffic is sent over unencrypted channels.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-28T18:23:27.000000Z"}]}