Added more info and strict matcher

patch-1
sandeep 2021-03-29 17:05:11 +05:30
parent 42622724a1
commit 532dc4cf0c
1 changed files with 7 additions and 1 deletions

View File

@ -1,8 +1,12 @@
id: rockethchat-unauth-access
info:
name: RocketChat Unauthenticated Read Access
author: rojanrijal
severity: critical
description: An issue with the Live Chat accepting invalid parameters could potentially allow unauthenticated access to messages and user tokens.
reference: https://docs.rocket.chat/guides/security/security-updates
tags: rockethchat,unauth
requests:
- raw:
@ -38,5 +42,7 @@ requests:
- 200
- type: word
words:
- '\"result\":{\"messages\"'
- '"{\"msg\":\"result\",\"result\":{\"messages\"'
- '"success":true'
part: body
condition: and