From 2d03dfdf853f50ddb206ed29740dad0a41f94437 Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Tue, 31 May 2022 14:38:36 +0530 Subject: [PATCH] Update showdoc-file-upload-rce.yaml --- vulnerabilities/other/showdoc-file-upload-rce.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/vulnerabilities/other/showdoc-file-upload-rce.yaml b/vulnerabilities/other/showdoc-file-upload-rce.yaml index b3e79aa52d..3a44cdbb77 100644 --- a/vulnerabilities/other/showdoc-file-upload-rce.yaml +++ b/vulnerabilities/other/showdoc-file-upload-rce.yaml @@ -4,7 +4,8 @@ info: name: Showdoc <2.8.6 - Remote Code Execution author: pikpikcu severity: critical - description: Showdoc versions before 2.8.6 is susceptible to remote code execution. + description: | + Showdoc versions before 2.8.6 is susceptible to remote code execution. reference: - https://github.com/star7th/showdoc/pull/1059 classification: @@ -12,7 +13,7 @@ info: cvss-score: 10.0 cve-id: cwe-id: CWE-77 - tags: rce,fileupload,showdoc + tags: rce,fileupload,showdoc,oss,intrusive requests: - raw: @@ -31,6 +32,7 @@ requests: matchers-condition: and matchers: - type: word + part: body words: - '"url":"http:' - '"success":1'