diff --git a/vulnerabilities/other/goanywhere-log4j-rce.yaml b/vulnerabilities/other/goanywhere-log4j-rce.yaml index 86d01502b2..59e68d4240 100644 --- a/vulnerabilities/other/goanywhere-log4j-rce.yaml +++ b/vulnerabilities/other/goanywhere-log4j-rce.yaml @@ -6,12 +6,15 @@ info: severity: critical reference: - https://www.goanywhere.com/cve-2021-44228-and-cve-2021-45046-goanywhere-mitigation-steps - metadata: - shodan-query: http.title:"GoAnywhere" + - https://logging.apache.org/log4j/2.x/security.html + - https://nvd.nist.gov/vuln/detail/CVE-2021-44228 classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H cvss-score: 10.0 cwe-id: CWE-77 + metadata: + verified: true + shodan-query: title:"GoAnywhere" tags: jndi,log4j,rce,cve,cve2021,oast,goanywhere requests: @@ -59,4 +62,4 @@ requests: part: interactsh_request group: 1 regex: - - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Print extracted ${sys:os.name} in output \ No newline at end of file + - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Print extracted ${sys:os.name} in output