This updates the order of files so that versions are extracted before generic Joomla! detection, fixes the regex for version matching, and adds a required AND matcher for the joomla.xml file.

patch-1
sullo 2023-09-27 13:08:55 -04:00
parent 627e654d30
commit 4afb8a0587
1 changed files with 5 additions and 4 deletions

View File

@ -5,7 +5,7 @@ info:
author: ricardomaia
severity: info
description: |
Joomla, also spelled Joomla! (with an exclamation mark) and sometimes abbreviated as J!, is a free and open-source content management system (CMS) for publishing web content on websites.
Joomla! is a free and open-source content management system (CMS) for publishing content on websites.
reference:
- https://www.joomla.org/
- https://github.com/joomla/joomla-cms
@ -20,11 +20,11 @@ info:
http:
- method: GET
path:
- "{{BaseURL}}" # >= 1.5.0 and <= 1.5.26
- "{{BaseURL}}/language/en-GB/en-GB.xml" # >= 1.5.0 and <= 1.5.26
- "{{BaseURL}}/administrator/manifests/files/joomla.xml" # >= 1.6.0
- "{{BaseURL}}/language/en-GB/en-GB.xml" # >= 1.5.0 and <= 1.5.26
- "{{BaseURL}}/README.txt"
- "{{BaseURL}}/modules/custom.xml" # < 1.5.0
- "{{BaseURL}}" # >= 1.5.0 and <= 1.5.26
stop-at-first-match: true
host-redirects: true
@ -44,6 +44,7 @@ http:
regex:
- '(?i)<meta.name="generator".content="(Joomla!).*/>'
- '(?i)Joomla_([\d.|\d]+)_version_history'
- 'FILES_JOOMLA_XML_DESCRIPTION'
condition: or
extractors:
@ -51,6 +52,6 @@ http:
name: version
group: 1
regex:
- "(?i)<version>(.*)</version>"
- '<version>(.*?)</version>'
- '(?i)Joomla_([\d.|\d]+)_version_history'
part: body