Update and rename CVE-2020-11529.yaml to cves/2020/CVE-2020-11529.yaml

patch-1
Prince Chaddha 2022-01-11 14:35:53 +05:30 committed by GitHub
parent 3d24bd0f27
commit 7f26b9e895
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 3 deletions

View File

@ -8,21 +8,20 @@ info:
reference:
- https://github.com/getgrav/grav/issues/3134
- https://www.cvedetails.com/cve/CVE-2020-11529
tags: cve,cve2019,redirect,grav.getgrav
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.10
cve-id: CVE-2020-11529
cwe-id: CWE-601
tags: cve,cve2019,redirect,grav,getgrav
requests:
- method: GET
path:
- '{{BaseURL}}/%252f%255cexample.com%252fa%253fb/'
matchers:
- type: regex
regex:
- '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_]*\.)?example\.com(?:\s*?)$'
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)example\.com\/?(\/|[^.].*)?$'
part: header