Enhancement: vulnerabilities/metersphere/metersphere-plugin-rce.yaml by mp

vulnerabilities/metersphere/metersphere-plugin-rce.yaml

@@ -1,12 +1,18 @@
 id: metersphere-plugin-rce
 
 info:
-  name: MeterSphere Plugin Pre-auth RCE
+  name: MeterSphere - Remote Code Execution
   author: pdteam,y4er
   severity: critical
+  description: MeterSphere is susceptible to remote code execution.
   reference:
     - https://y4er.com/post/metersphere-plugincontroller-pre-auth-rce/
     - https://github.com/metersphere/metersphere
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
+    cvss-score: 10.0
+    cve-id:
+    cwe-id: CWE-77
   tags: metersphere,rce,intrusive
 
 requests:
@@ -56,4 +62,6 @@ requests:
     extractors:
       - type: regex
         regex:
-          - "((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"
+          - "((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"
+
+# Enhanced by mp on 2022/05/26