Added CVE-2022-24856 (Flyte Console < 0.52.0 - SSRF)

[ehsandeep]

Template / PR Information

Reference:

• GHSA-www6-hf2v-v9m9
• feat: cleanup flyteorg/flyteconsole#389
• https://nvd.nist.gov/vuln/detail/CVE-2022-24856
• https://hackerone.com/reports/1540906

echo http://localhost:3000 | nuclei -t cves/2022/CVE-2022-24856.yaml

                     __     _
   ____  __  _______/ /__  (_)
  / __ \/ / / / ___/ / _ \/ /
 / / / / /_/ / /__/ /  __/ /
/_/ /_/\__,_/\___/_/\___/_/   2.7.1

		projectdiscovery.io

[WRN] Use with caution. You are responsible for your actions.
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
[INF] Using Nuclei Engine 2.7.1 (latest)
[INF] Using Nuclei Templates 9.0.2 (latest)
[INF] Templates added in last update: 24
[INF] Templates loaded for scan: 1
[CVE-2022-24856] [http] [high] http://localhost:3000/cors_proxy/https://www.interact.sh

Template Validation

I've validated this template locally?

• YES
• NO

Additional Details (leave it blank if not applicable)

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server