diff --git a/cves/2018/CVE-2018-8033.yaml b/cves/2018/CVE-2018-8033.yaml index c9ad328b5b..b9547e3ef0 100644 --- a/cves/2018/CVE-2018-8033.yaml +++ b/cves/2018/CVE-2018-8033.yaml @@ -4,7 +4,8 @@ info: name: Apache OFBiz 16.11.04 - XML Entity Injection author: pikpikcu severity: high - description: Apache OFBiz 16.11.04 is susceptible to XML external entity injection (XXE injection). + description: | + Apache OFBiz 16.11.04 is susceptible to XML external entity injection (XXE injection). reference: - https://lists.apache.org/thread.html/e8fb551e86e901932081f81ee9985bb72052b4d412f23d89b1282777@%3Cuser.ofbiz.apache.org%3E - https://nvd.nist.gov/vuln/detail/CVE-2018-8033 @@ -29,9 +30,10 @@ requests: matchers-condition: and matchers: - type: regex + part: body regex: - "root:.*:0:0:" - part: body + - type: status status: - 200