Update CVE-2021-27358.yaml

cves/2021/CVE-2021-27358.yaml

@@ -6,9 +6,10 @@ info:
   severity: high
   description: The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
   reference:
+    - https://phabricator.wikimedia.org/T274736
     - https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-2/
     - https://nvd.nist.gov/vuln/detail/CVE-2021-27358
-  tags: cve,cve2021,grafana
+  tags: cve,cve2021,grafana,unauth
 
 requests:
   - raw:
@@ -20,10 +21,16 @@ requests:
 
         {"dashboard": {"editable":false,"hideControls":true,"nav":[{"enable":false,"type":"timepicker"}],"rows": [{}],"style":"dark","tags":[],"templating":{"list":[]},"time":{},"timezone":"browser","title":"Home","version":5},"expires": 3600}
 
+    matchers-condition: and
     matchers:
       - part: body
         type: word
         words:
-          - "deleteKey"
-          - "deleteUrl"
+          - '"deleteUrl":'
+          - '"deleteKey":'
         condition: and
+
+      - type: word
+        part: header
+        words:
+          - "application/json"