From 66fe14e8a0d7373faa3e4de9ef8b58ebc645e7bc Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Tue, 31 May 2022 14:33:16 +0530 Subject: [PATCH] Update metersphere-plugin-rce.yaml --- vulnerabilities/metersphere/metersphere-plugin-rce.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/vulnerabilities/metersphere/metersphere-plugin-rce.yaml b/vulnerabilities/metersphere/metersphere-plugin-rce.yaml index 5e958b920a..781d5f7cf3 100644 --- a/vulnerabilities/metersphere/metersphere-plugin-rce.yaml +++ b/vulnerabilities/metersphere/metersphere-plugin-rce.yaml @@ -4,7 +4,8 @@ info: name: MeterSphere - Remote Code Execution author: pdteam,y4er severity: critical - description: MeterSphere is susceptible to remote code execution. + description: | + MeterSphere is susceptible to remote code execution. reference: - https://y4er.com/post/metersphere-plugincontroller-pre-auth-rce/ - https://github.com/metersphere/metersphere @@ -46,6 +47,7 @@ requests: matchers-condition: and matchers: - type: word + part: body words: - '"data":' - '"success":true'