.. / CVE-2022-0087

• XSS
• Nuclei
• Web

Exploit for Keystone 6 Login Page - Open Redirect and Cross-Site Scripting (CVE-2022-0087)

Description:

On the login page, there is a “from=” parameter in URL which is vulnerable to open redirect and can be escalated to reflected XSS.

Nuclei Template

View the template here CVE-2022-0087.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-0087.yaml

References: