Update and rename misconfiguration/vulnerabilities/other/umbraco-base-ssrf.yaml to vulnerabilities/other/umbraco-base-ssrf.yaml
parent
a47ea206d9
commit
1bd96f8902
|
@ -11,6 +11,9 @@ info:
|
||||||
cvss-score: 5.3
|
cvss-score: 5.3
|
||||||
cve-id: CVE-2020-10770
|
cve-id: CVE-2020-10770
|
||||||
cwe-id: CWE-601
|
cwe-id: CWE-601
|
||||||
|
metadata:
|
||||||
|
verified: true
|
||||||
|
shodan-query: http.html:"Umbraco"
|
||||||
tags: ssrf,umbraco,oast
|
tags: ssrf,umbraco,oast
|
||||||
|
|
||||||
requests:
|
requests:
|
||||||
|
@ -21,8 +24,16 @@ requests:
|
||||||
- '{{BaseURL}}/umbraco/backoffice/UmbracoApi/Dashboard/GetRemoteDashboardCss?section=AvoidGetCacheItem&baseUrl=http://{{interactsh-url}}/'
|
- '{{BaseURL}}/umbraco/backoffice/UmbracoApi/Dashboard/GetRemoteDashboardCss?section=AvoidGetCacheItem&baseUrl=http://{{interactsh-url}}/'
|
||||||
|
|
||||||
stop-at-first-match: true
|
stop-at-first-match: true
|
||||||
|
req-condition: true
|
||||||
|
matchers-condition: and
|
||||||
matchers:
|
matchers:
|
||||||
- type: word
|
- type: word
|
||||||
part: interactsh_protocol # Confirms the HTTP Interaction
|
part: interactsh_protocol # Confirms the HTTP Interaction
|
||||||
words:
|
words:
|
||||||
- "http"
|
- "http"
|
||||||
|
|
||||||
|
- type: dsl
|
||||||
|
dsl:
|
||||||
|
- "len(body_1)==0"
|
||||||
|
- "len(body_2)==0"
|
||||||
|
- "len(body_3)==0"
|
Loading…
Reference in New Issue