diff --git a/cves/CVE-2020-13379.yaml b/cves/CVE-2020-13379.yaml index 264c5ece3e..a3fe08b031 100644 --- a/cves/CVE-2020-13379.yaml +++ b/cves/CVE-2020-13379.yaml @@ -13,10 +13,12 @@ info: requests: - method: GET path: - - '{{BaseURL}}avatar/%7B%7Bprintf%20%22%25s%22%20%22this.Url%22%7D%7D' - - '{{BaseURL}}/avatar/%7B%7Bprintf%20%22%25s%22%20%22this.Url%22%7D%7D' - - "{{BaseURL}}/" + - '{{BaseURL}}/avatar/test%3fd%3dredirect.example.com%25253f%253b%252fbp.blogspot.com%252f matchers: - type: status status: - - 502 + - 200 + - type: word + words: + - "image/jpeg" + part: header