Update and rename CVE-2017-10974.yaml to cves/2017/CVE-2017-10974.yaml

patch-1
Prince Chaddha 2021-11-09 22:13:59 +05:30 committed by GitHub
parent edd504d533
commit 0328b4bd5d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 2 deletions

View File

@ -4,13 +4,16 @@ info:
name: Yaws 1.91 - Remote File Disclosure
author: 0x_Akoko
severity: high
reference: https://www.exploit-db.com/exploits/42303
description: Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080
reference:
- https://www.exploit-db.com/exploits/42303
- https://nvd.nist.gov/vuln/detail/CVE-2017-10974
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2017-10974
cwe-id: CWE-22
tags: cve,cve2017,yaws,rfd,lfi
tags: cve,cve2017,yaws,lfi
requests:
@ -31,3 +34,5 @@ requests:
- type: dsl
dsl:
- '!contains(tolower(body), "<html")'
- '!contains(tolower(body), "<HTML")'
condition: or