minor update

patch-4
Dhiyaneshwaran 2024-06-03 00:16:00 +05:30 committed by GitHub
parent 73693100d6
commit 1aa0726ef9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 14 additions and 4 deletions

View File

@ -7,11 +7,11 @@ info:
description: | description: |
Apache HugeGraph-Server is an open-source graph database that provides a scalable and high-performance solution for managing and analyzing large-scale graph data. It is commonly used in Java8 and Java11 environments. However, versions prior to 1.3.0 are vulnerable to a remote command execution (RCE) vulnerability in the gremlin component. Apache HugeGraph-Server is an open-source graph database that provides a scalable and high-performance solution for managing and analyzing large-scale graph data. It is commonly used in Java8 and Java11 environments. However, versions prior to 1.3.0 are vulnerable to a remote command execution (RCE) vulnerability in the gremlin component.
reference: reference:
- https://example.com/gremlin-vulnerability-details
- http://www.openwall.com/lists/oss-security/2024/04/22/3 - http://www.openwall.com/lists/oss-security/2024/04/22/3
- https://hugegraph.apache.org/docs/config/config-authentication/#configure-user-authentication - https://hugegraph.apache.org/docs/config/config-authentication/#configure-user-authentication
- https://lists.apache.org/thread/nx6g6htyhpgtzsocybm242781o8w5kq9 - https://lists.apache.org/thread/nx6g6htyhpgtzsocybm242781o8w5kq9
- https://github.com/fkie-cad/nvd-json-data-feeds - https://github.com/Zeyad-Azima/CVE-2024-27348
- https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2024-27348
classification: classification:
epss-score: 0.00045 epss-score: 0.00045
epss-percentile: 0.15047 epss-percentile: 0.15047
@ -34,6 +34,16 @@ http:
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: word - type: word
part: interactsh_protocol # Confirms the HTTP Interaction part: interactsh_protocol # Confirms the DNS Interaction
words: words:
- "dns" - 'dns'
- type: word
part: body
words:
- '"inputStream":'
- type: word
part: header
words:
- 'application/json'