Update CVE-2020-14864.yaml

patch-1
bauthard 2020-10-29 15:43:50 +05:30
parent 54f73f80e1
commit ca1c3e7f72
1 changed files with 4 additions and 3 deletions

View File

@ -1,8 +1,9 @@
id: CVE-2020-14864
info:
name: 'Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - "getPreviewImage" Directory Traversal/Local File Inclusion'
name: 'Oracle Fusion - "getPreviewImage" Directory Traversal/Local File Inclusion'
description: 'Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - "getPreviewImage" Directory Traversal/Local File Inclusion'
author: Ivo Palazzolo (@palaziv)
cvss: 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
# cvss: 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
severity: high
requests:
- method: GET
@ -20,4 +21,4 @@ requests:
- type: regex
regex:
- 'root:[x*]:0:0'
part: body
part: body