.. / CVE-2020-24701

• XSS
• Nuclei
• Web

Exploit for OX Appsuite - Cross-Site Scripting (CVE-2020-24701)

Description:

OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI).

Nuclei Template

View the template here CVE-2020-24701.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-24701.yaml

References: