Update and rename misconfiguration/liferay-resource-leak.yaml to vulnerabilities/j2ee/liferay-resource-leak.yaml

patch-1
Prince Chaddha 2022-08-08 13:05:34 -07:00 committed by GitHub
parent 1d1b95fd89
commit a7d1ffbefd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 5 deletions

View File

@ -12,7 +12,7 @@ info:
metadata:
verified: true
shodan-query: title:"Liferay"
tags: liferay,lfi
tags: liferay,lfi,j2ee
requests:
- method: GET
@ -21,15 +21,17 @@ requests:
matchers-condition: and
matchers:
- type: regex
regex:
- "<web-app id"
- type: word
part: body
words:
- "<web-app id="
- "<?xml"
condition: and
- type: word
part: header
words:
- "application/xml"
part: header
- type: status
status: