daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9400 from j4vaovo/patch-2 

fix  CVE-2022-45917 fp
patch-1
Ritik Chaddha 2024-03-23 08:57:28 +05:30 committed by GitHub
parent 005231adaa d45f0da737
commit bd3f277464
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
http/cves/2022/CVE-2022-45917.yaml
View File

@ -35,13 +35,13 @@ info:
http:
- method: GET
path:
- "{{BaseURL}}/shib_logout.php?action=logout&return=https://example.com"
- "{{BaseURL}}/ilias/shib_logout.php?action=logout&return=https://example.com"
- "{{BaseURL}}/shib_logout.php?action=logout&return=https://oast.me"
- "{{BaseURL}}/ilias/shib_logout.php?action=logout&return=https://oast.me"
stop-at-first-match: true
matchers:
- type: regex
part: header
regex:
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)example\.com\/?(\/|[^.].*)?$'
# digest: 4b0a00483046022100fae3b07ccfdd4ee848d28d943dee2ff6bb4fcb4d42eed3a8a572621d7d69edcd022100d88cff0e5cc31d498edebb952bd682219636cb7af85a1f216e7a124b4e55c19d:922c64590222798bb761d5b6d8e72950
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)oast\.me\/?(\/|[^.].*)?$'
# digest: 4b0a00483046022100fae3b07ccfdd4ee848d28d943dee2ff6bb4fcb4d42eed3a8a572621d7d69edcd022100d88cff0e5cc31d498edebb952bd682219636cb7af85a1f216e7a124b4e55c19d:922c64590222798bb761d5b6d8e72950