Added missing tags
parent
0425b36e10
commit
71143da193
|
@ -21,14 +21,11 @@ requests:
|
||||||
- type: status
|
- type: status
|
||||||
status:
|
status:
|
||||||
- 200
|
- 200
|
||||||
|
|
||||||
- type: word
|
- type: word
|
||||||
|
part: body
|
||||||
words:
|
words:
|
||||||
- "http:\\/\\/nonexistent:31337\\/logback.xml"
|
- "http:\\/\\/nonexistent:31337\\/logback.xml"
|
||||||
- "reloadByURL"
|
- "reloadByURL"
|
||||||
- "JoranException"
|
- "JoranException"
|
||||||
condition: and
|
condition: and
|
||||||
part: body
|
|
||||||
- type: word
|
|
||||||
words:
|
|
||||||
- "X-Application-Context"
|
|
||||||
part: header
|
|
|
@ -4,7 +4,7 @@ info:
|
||||||
name: Spring Boot H2 Database RCE
|
name: Spring Boot H2 Database RCE
|
||||||
author: dwisiswant0
|
author: dwisiswant0
|
||||||
severity: critical
|
severity: critical
|
||||||
tags: springboot,rce
|
tags: springboot,rce,jolokia
|
||||||
reference:
|
reference:
|
||||||
- https://spaceraccoon.dev/remote-code-execution-in-three-acts-chaining-exposed-actuators-and-h2-database
|
- https://spaceraccoon.dev/remote-code-execution-in-three-acts-chaining-exposed-actuators-and-h2-database
|
||||||
- https://twitter.com/pyn3rd/status/1305151887964946432
|
- https://twitter.com/pyn3rd/status/1305151887964946432
|
||||||
|
|
Loading…
Reference in New Issue