updated dsl

patch-1
Ritik Chaddha 2024-03-06 11:09:13 +05:30 committed by GitHub
parent f644ec82df
commit ab124c8f84
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 3 deletions

View File

@ -15,7 +15,7 @@ info:
cwe-id: CWE-23
metadata:
verified: true
max-request: 1
max-request: 3
shodan-query: http.component:"TeamCity"
tags: cve,cve2024,teamcity,jetbrains,auth-bypass
@ -27,11 +27,10 @@ http:
- "{{BaseURL}}/update/../admin/diagnostic.jsp"
stop-at-first-match: true
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains(header, "text/html")'
- 'contains(body, "Debug Logging") && contains(body, "CPU & Memory Usage")'
- 'contains_all(body, "Debug Logging", "CPU & Memory Usage")'
condition: and