CVE-2026-45231 — Cross-Site Scripting (XSS)

title: DumbAssets Stored XSS via Asset API - CVE-2026-45231
id: scw-2026-05-18-ai-1
status: experimental
level: medium
description: |
  Detects attempts to exploit the stored XSS vulnerability in DumbAssets through 1.0.11 by submitting payloads containing script tags or common XSS patterns in asset API requests. This rule specifically targets the '/api/assets' endpoint and HTTP methods used for creating or updating assets, looking for suspicious content within the request URI query parameters.
author: SCW Feed Engine (AI-generated)
date: 2026-05-18
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-45231/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      cs-uri|contains:
          - '/api/assets'
      cs-method:
          - 'POST'
          - 'PUT'
      cs-uri-query|contains:
          - '<script>'
          - 'alert('
          - 'onerror='
      condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse