Update CVE-2018-8033.yaml
parent
60775ae290
commit
0692e185b9
|
@ -4,7 +4,8 @@ info:
|
|||
name: Apache OFBiz 16.11.04 - XML Entity Injection
|
||||
author: pikpikcu
|
||||
severity: high
|
||||
description: Apache OFBiz 16.11.04 is susceptible to XML external entity injection (XXE injection).
|
||||
description: |
|
||||
Apache OFBiz 16.11.04 is susceptible to XML external entity injection (XXE injection).
|
||||
reference:
|
||||
- https://lists.apache.org/thread.html/e8fb551e86e901932081f81ee9985bb72052b4d412f23d89b1282777@%3Cuser.ofbiz.apache.org%3E
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2018-8033
|
||||
|
@ -29,9 +30,10 @@ requests:
|
|||
matchers-condition: and
|
||||
matchers:
|
||||
- type: regex
|
||||
part: body
|
||||
regex:
|
||||
- "root:.*:0:0:"
|
||||
part: body
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
|
Loading…
Reference in New Issue