Update and rename misconfiguration/vulnerabilities/other/umbraco-base-ssrf.yaml to vulnerabilities/other/umbraco-base-ssrf.yaml

patch-1
Prince Chaddha 2022-07-05 08:23:51 +05:30 committed by GitHub
parent a47ea206d9
commit 1bd96f8902
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 0 deletions

View File

@ -11,6 +11,9 @@ info:
cvss-score: 5.3
cve-id: CVE-2020-10770
cwe-id: CWE-601
metadata:
verified: true
shodan-query: http.html:"Umbraco"
tags: ssrf,umbraco,oast
requests:
@ -21,8 +24,16 @@ requests:
- '{{BaseURL}}/umbraco/backoffice/UmbracoApi/Dashboard/GetRemoteDashboardCss?section=AvoidGetCacheItem&baseUrl=http://{{interactsh-url}}/'
stop-at-first-match: true
req-condition: true
matchers-condition: and
matchers:
- type: word
part: interactsh_protocol # Confirms the HTTP Interaction
words:
- "http"
- type: dsl
dsl:
- "len(body_1)==0"
- "len(body_2)==0"
- "len(body_3)==0"