Update metersphere-plugin-rce.yaml
parent
236a91ffd6
commit
66fe14e8a0
|
@ -4,7 +4,8 @@ info:
|
|||
name: MeterSphere - Remote Code Execution
|
||||
author: pdteam,y4er
|
||||
severity: critical
|
||||
description: MeterSphere is susceptible to remote code execution.
|
||||
description: |
|
||||
MeterSphere is susceptible to remote code execution.
|
||||
reference:
|
||||
- https://y4er.com/post/metersphere-plugincontroller-pre-auth-rce/
|
||||
- https://github.com/metersphere/metersphere
|
||||
|
@ -46,6 +47,7 @@ requests:
|
|||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- '"data":'
|
||||
- '"success":true'
|
||||
|
|
Loading…
Reference in New Issue