nuclei-templates/cves/2018/CVE-2018-11784.yaml

27 lines
832 B
YAML
Raw Normal View History

2021-03-18 16:22:01 +00:00
id: CVE-2018-11784
info:
name: Apache Tomcat Open Redirect
author: geeknik
severity: medium
description: Apache Tomcat versions prior to 9.0.12, 8.5.34, and 7.0.91 are prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input.
reference:
- https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75@%3Cannounce.tomcat.apache.org%3E
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss-score: 4.3
cve-id: CVE-2018-11784
cwe-id: CWE-601
tags: tomcat,redirect,cve,cve2018,apache
2021-03-18 16:22:01 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}//example.com"
matchers:
- type: regex
regex:
- "(?m)^(L|l)ocation: (((http|https):)?//(www.)?)?example.com"
part: header