Update CVE-2014-9617.yaml

patch-1
Prince Chaddha 2021-12-07 13:38:32 +05:30 committed by GitHub
parent 6d73776e5d
commit 2fcb784fcf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 3 deletions

View File

@ -5,13 +5,15 @@ info:
author: daffainfo
severity: medium
description: Netsweeper version 3.0.6 was vulnerable to an Unauthenticated and Authenticated Open Redirect vulnerability.
reference: https://packetstormsecurity.com/files/download/133034/netsweeper-issues.tgz
tags: cve,cve2021,netsweeper,redirect
reference:
- https://packetstormsecurity.com/files/download/133034/netsweeper-issues.tgz
- https://nvd.nist.gov/vuln/detail/CVE-2014-9617
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.10
cve-id: CVE-2014-9617
cwe-id: CWE-601
tags: cve,cve2014,netsweeper,redirect
requests:
- method: GET
@ -20,6 +22,6 @@ requests:
matchers:
- type: regex
part: header
regex:
- '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)example\.com.*$'
part: header