Nuclei Template
View the template here CVE-2020-26258.yaml
Validate with Nuclei
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-26258.yaml
XStream before 1.4.15 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations.
View the template here CVE-2020-26258.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-26258.yaml
References:
https://github.com/x-stream/xstream/security/advisories/GHSA-4cch-wxpw-8p28