updated matcher
parent
41bd76083d
commit
8b3e109c31
|
@ -4,10 +4,12 @@ info:
|
|||
name: UFIDA NC uapjs - Remote Code Execution
|
||||
author: SleepingBag945,s4e-io
|
||||
severity: critical
|
||||
description: There is an arbitrary method calling vulnerability in UFIDA NC and NCC systems. By exploiting the vulnerability through uapjs (jsinvoke), dangerous methods can be called to cause attacks.
|
||||
description: |
|
||||
There is an arbitrary method calling vulnerability in UFIDA NC and NCC systems. By exploiting the vulnerability through uapjs (jsinvoke), dangerous methods can be called to cause attacks.
|
||||
reference:
|
||||
- https://mp.weixin.qq.com/s/8ZRrmUCD2bfznd1MyDDU8A
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 2
|
||||
fofa-query: app="用友-NC-Cloud"
|
||||
tags: cnvd,cnvd2023,yonyou,rce,intrusive
|
||||
|
@ -29,6 +31,7 @@ http:
|
|||
matchers:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- "len(body)==0"
|
||||
- 'status_code == 200'
|
||||
internal: true
|
||||
|
||||
|
|
Loading…
Reference in New Issue