.. / CVE-2018-8715

• Auth Bypass
• Nuclei
• Web

Exploit for AppWeb - Authentication Bypass (CVE-2018-8715)

Description:

The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types.

Nuclei Template

View the template here CVE-2018-8715.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-8715.yaml

References: