Enhancement: iot/qvisdvr-deserialization-rce.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-05-19 14:39:38 -04:00
parent a1657bc2a1
commit 12cdfe270e
1 changed files with 9 additions and 1 deletions

View File

@ -4,8 +4,14 @@ info:
name: QVISDVR JSF Deserialization - Remote Code Execution
author: me9187
severity: critical
description: QVISDVR Java-Deserialization was discovered, which could allow remote code execution.
reference:
- https://twitter.com/Me9187/status/1414606876575162373
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cvss-score: 10.0
cve-id:
cwe-id: CWE-77
tags: qvisdvr,rce,deserialization,jsf,iot
requests:
@ -41,3 +47,5 @@ requests:
part: interactsh_protocol
words:
- http
# Enhanced by mp on 2022/05/19