Update and rename CVE-2018-12300.yaml to cves/2018/CVE-2018-12300.yaml

cves/2018/CVE-2018-12300.yaml

@@ -8,21 +8,21 @@ info:
   reference:
     - https://blog.securityevaluators.com/invading-your-personal-cloud-ise-labs-exploits-the-seagate-stcr3000101-ecf89de2170
     - https://www.cvedetails.com/cve/CVE-2018-12300
-  tags: cve,cve2018,redirect,seagate,nasos
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
     cvss-score: 6.10
     cve-id: CVE-2018-12300
     cwe-id: CWE-601
+  tags: cve,cve2018,redirect,seagate,nasos
 
 requests:
   - method: GET
 
     path:
-      - '{{BaseURL}}/echo-server.html?code=test&state=http://www.example.com#'
+      - '{{BaseURL}}/echo-server.html?code=test&state=http://www.attacker.com#'
 
     matchers:
       - type: regex
-        regex:
-          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_]*\.)?example\.com(?:\s*?)$'
         part: header
+        regex:
+          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)attacker\.com\/?(\/|[^.].*)?$' # https://regex101.com/r/ZDYhFh/1