daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update showdoc-file-upload-rce.yaml

patch-1
Prince Chaddha 2022-05-31 14:38:36 +05:30 committed by GitHub
parent f46b4f6fb0
commit 2d03dfdf85
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
vulnerabilities/other/showdoc-file-upload-rce.yaml
View File

@ -4,7 +4,8 @@ info:
name: Showdoc <2.8.6 - Remote Code Execution name: Showdoc <2.8.6 - Remote Code Execution
author: pikpikcu author: pikpikcu
severity: critical severity: critical
description: Showdoc versions before 2.8.6 is susceptible to remote code execution. description: |
Showdoc versions before 2.8.6 is susceptible to remote code execution.
reference: reference:
- https://github.com/star7th/showdoc/pull/1059 - https://github.com/star7th/showdoc/pull/1059
classification: classification:
@ -12,7 +13,7 @@ info:
cvss-score: 10.0 cvss-score: 10.0
cve-id: cve-id:
cwe-id: CWE-77 cwe-id: CWE-77
tags: rce,fileupload,showdoc tags: rce,fileupload,showdoc,oss,intrusive
requests: requests:
- raw: - raw:
@ -31,6 +32,7 @@ requests:
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: word - type: word
part: body
words: words:
- '"url":"http:' - '"url":"http:'
- '"success":1' - '"success":1'