Update CVE-2021-24917.yaml

cves/2021/CVE-2021-24917.yaml

@@ -21,17 +21,18 @@ requests:
         Host: {{Hostname}}
         Referer: something
 
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: header
+        words:
+          - 'redirect_to=%2Fwp-admin%2Fsomething&reauth=1'
+
+      - type: dsl
+        dsl:
+          - "!contains(tolower(location), 'wp-login.php')"
+
     extractors:
       - type: kval
         kval:
           - location
-
-    matchers-condition: and
-    matchers:
-      - type: word
-        part: location
-        words:
-          - 'redirect_to=%2Fwp-admin%2Fsomething&reauth=1'
-      - type: dsl
-        dsl:
-          - "!contains(tolower(location), 'wp-login.php')"