.. / CVE-2022-25356

• XXE
• Nuclei
• Web

Exploit for Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection (CVE-2022-25356)

Description:

Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information such as protection used (2FA), admin email, and product registration keys.

Nuclei Template

View the template here CVE-2022-25356.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-25356.yaml

References: