Create CVE-2020-24881.yaml

[hnd3884]

/claim #11184

Template / PR Information

The template needs 2 variables username and password to run, command like bellow

nuclei -u http://192.168.180.132 -t osticket.yaml -var [email protected] -var password=secret

The template use interactsh as matcher to detect SSRF

• Added CVE-2020-24881
• References:
  • https://blackbatsec.medium.com/cve-2020-24881-server-side-request-forgery-in-osticket-eea175e147f0

Template Validation

I've validated this template locally?

• YES
• NO

Additional Details (leave it blank if not applicable)

POC

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server

[algora-pbc]

👉 To complete your submission, sign up on Algora, link your Github account and submit the data for your PR.

[GeorginaReeder]

Thanks for your contribution @hnd3884 ! :)

[ritikchaddha]

Hello @hnd3884, thank you for providing this template! However, I noticed that the matcher from the last request is missing. If you could share the debug data for the template, it would be incredibly helpful in resolving and validating it fast.

Thanks