Update CVE-2018-16341.yaml

patch-1
Prince Chaddha 2022-06-20 21:41:39 +05:30 committed by GitHub
parent 8e26871500
commit 48fa6b5acb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 2 deletions

View File

@ -4,7 +4,8 @@ info:
name: Nuxeo <10.3 - Remote Code Execution
author: madrobot
severity: high
description: Nuxeo prior to version 10.3 is susceptible to an unauthenticated remote code execution vulnerability via server-side template injection.
description: |
Nuxeo prior to version 10.3 is susceptible to an unauthenticated remote code execution vulnerability via server-side template injection.
classification:
cve-id: CVE-2018-16341
reference:
@ -15,10 +16,11 @@ requests:
- method: GET
path:
- "{{BaseURL}}/nuxeo/login.jsp/pwn${31333333330+7}.xhtml"
matchers:
- type: word
part: body
words:
- "31333333337"
part: body
# Enhanced by mp on 2022/06/13