Update showdoc-file-upload-rce.yaml
parent
f46b4f6fb0
commit
2d03dfdf85
|
@ -4,7 +4,8 @@ info:
|
|||
name: Showdoc <2.8.6 - Remote Code Execution
|
||||
author: pikpikcu
|
||||
severity: critical
|
||||
description: Showdoc versions before 2.8.6 is susceptible to remote code execution.
|
||||
description: |
|
||||
Showdoc versions before 2.8.6 is susceptible to remote code execution.
|
||||
reference:
|
||||
- https://github.com/star7th/showdoc/pull/1059
|
||||
classification:
|
||||
|
@ -12,7 +13,7 @@ info:
|
|||
cvss-score: 10.0
|
||||
cve-id:
|
||||
cwe-id: CWE-77
|
||||
tags: rce,fileupload,showdoc
|
||||
tags: rce,fileupload,showdoc,oss,intrusive
|
||||
|
||||
requests:
|
||||
- raw:
|
||||
|
@ -31,6 +32,7 @@ requests:
|
|||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- '"url":"http:'
|
||||
- '"success":1'
|
||||
|
|
Loading…
Reference in New Issue