daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'patch-1' of https://github.com/brenocss/nuclei-templates

patch-1
Prince Chaddha 2022-08-25 12:19:47 +05:30
parent 4cfdd18033 9aa3167322
commit 54b8725244
1 changed files with 1 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
misconfiguration/apache/tomcat-pathnormalization.yaml
View File

@ -4,13 +4,7 @@ info:
name: Tomcat Manager Path Normalization
author: brenocss,organiccrap
severity: info
description: A Tomcat Manager login panel was discovered via path normalization. Normalizing a path involves modifying the string that identifies a path or file so that it conforms to a valid path on the target
operating system.
reference:
- https://docs.microsoft.com/en-us/dotnet/framework/migration-guide/mitigation-path-normalization
- https://i.blackhat.com/us-18/Wed-August-8/us-18-Orange-Tsai-Breaking-Parser-Logic-Take-Your-Path-Normalization-Off-And-Pop-0days-Out-2.pdf
classification:
cwe-id: CWE-200
reference: https://i.blackhat.com/us-18/Wed-August-8/us-18-Orange-Tsai-Breaking-Parser-Logic-Take-Your-Path-Normalization-Off-And-Pop-0days-Out-2.pdf
tags: panel,tomcat,apache
requests: