Create CVE-2024-8190.yaml

[CodeStuffBreakThings]

Template / PR Information

This template is for the authenticated command injection vulnerability in Ivanti Cloud Service Appliance 4.6 patch 518 and earlier.

• Added CVE-2024-8190
• References:
  • https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Service-Appliance-CSA-CVE-2024-8190
  • https://www.horizon3.ai/attack-research/cisa-kev-cve-2024-8190-ivanti-csa-command-injection
  • https://github.com/horizon3ai/CVE-2024-8190

Template Validation

I've validated this template locally?

• YES
• NO

Additional Details (leave it blank if not applicable)

Since HTTP basic authentication is required to exploit this vulnerability, a secret file is necessary.
For example:

static:
  - type: basicauth
    domains:
      - myvulnerablecsa.com
    username: admin
    password: Qwerty123!

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server

[GeorginaReeder]

Thanks so much for your contribution @CodeStuffBreakThings !