From 06adbe6447f52520ff06f2a79d0c7f7b761dec88 Mon Sep 17 00:00:00 2001 From: Ritik Chaddha Date: Thu, 28 Jul 2022 14:05:26 +0530 Subject: [PATCH] Update springboot-actuators-jolokia-xxe.yaml --- .../springboot/springboot-actuators-jolokia-xxe.yaml | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/vulnerabilities/springboot/springboot-actuators-jolokia-xxe.yaml b/vulnerabilities/springboot/springboot-actuators-jolokia-xxe.yaml index d4673ea0fa..6c614c7f55 100644 --- a/vulnerabilities/springboot/springboot-actuators-jolokia-xxe.yaml +++ b/vulnerabilities/springboot/springboot-actuators-jolokia-xxe.yaml @@ -17,16 +17,17 @@ requests: - "{{BaseURL}}/jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/nonexistent:31337!/logback.xml" - "{{BaseURL}}/actuator/jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/random:915!/logback.xml" + stop-at-first-match: true matchers-condition: and matchers: - - type: status - status: - - 200 - - type: word part: body words: - "http:\\/\\/nonexistent:31337\\/logback.xml" - "reloadByURL" - "JoranException" - condition: and \ No newline at end of file + condition: and + + - type: status + status: + - 200 \ No newline at end of file