Update showdoc-file-upload-rce.yaml

patch-1
Prince Chaddha 2022-05-31 14:38:36 +05:30 committed by GitHub
parent f46b4f6fb0
commit 2d03dfdf85
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 2 deletions

View File

@ -4,7 +4,8 @@ info:
name: Showdoc <2.8.6 - Remote Code Execution
author: pikpikcu
severity: critical
description: Showdoc versions before 2.8.6 is susceptible to remote code execution.
description: |
Showdoc versions before 2.8.6 is susceptible to remote code execution.
reference:
- https://github.com/star7th/showdoc/pull/1059
classification:
@ -12,7 +13,7 @@ info:
cvss-score: 10.0
cve-id:
cwe-id: CWE-77
tags: rce,fileupload,showdoc
tags: rce,fileupload,showdoc,oss,intrusive
requests:
- raw:
@ -31,6 +32,7 @@ requests:
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"url":"http:'
- '"success":1'