Enhancement: cves/2009/CVE-2009-5020.yaml by mp

cves/2009/CVE-2009-5020.yaml

@@ -1,28 +1,26 @@
 id: CVE-2009-5020
-
 info:
-  name: AWStats < 6.95 - Open redirect
+  name: AWStats < 6.95 - Open Redirect
   author: pdteam
   severity: medium
-  description: Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
+  description: An open redirect vulnerability in awredir.pl in AWStats < 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
   reference: https://nvd.nist.gov/vuln/detail/CVE-2009-5020
   tags: cve,cve2020,redirect,awstats
+  remediation:  Apply all relevant security patches and product upgrades.
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
     cvss-score: 6.10
     cve-id: CVE-2009-5020
     cwe-id: CWE-601
-
-
 requests:
   - method: GET
     path:
       - '{{BaseURL}}/awstats/awredir.pl?url=example.com'
       - '{{BaseURL}}/cgi-bin/awstats/awredir.pl?url=example.com'
-
     stop-at-first-match: true
     matchers:
       - type: regex
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)example\.com\/?(\/|[^.].*)?$' # https://regex101.com/r/ZDYhFh/1
+# Enhanced by mp on 2022/02/13