Merge pull request #8659 from projectdiscovery/princechaddha-patch-4

Fixed FP - CVE-2021-40149
2023-11-23 13:15:03 +05:30 · 2023-11-23 13:15:03 +05:30 · 0c39e6c757
parent eb18284246 2b1901e1d7
commit 0c39e6c757
1 changed files with 10 additions and 5 deletions
--- a/http/cves/2021/CVE-2021-40149.yaml
+++ b/http/cves/2021/CVE-2021-40149.yaml
@ -36,14 +36,19 @@ http:

    matchers-condition: and
    matchers:
+      - type: regex
+        part: body
+        regex:
+          - '(?m)^-----BEGIN PRIVATE KEY-----'
+
      - type: word
+        part: header
        words:
-          - "-----BEGIN RSA PRIVATE KEY-----"
-          - "-----END RSA PRIVATE KEY----"
+          - "application/json"
+          - "application/html"
        condition: and
+        negative: true

      - type: status
        status:
          - 200
-
-# digest: 4a0a00473045022100b6f8878ceddc4552858eae76829f51df35d0a5a2cd83a6e424da428a878e9d0c022021a436b631fbd10d282389c10d6e6dd4342bccfc13258547d135969c048a0e64:922c64590222798bb761d5b6d8e72950