Update CVE-2022-2034.yaml

cves/2022/CVE-2022-2034.yaml

@@ -13,26 +13,31 @@ info:
     - https://nvd.nist.gov/vuln/detail/CVE-2022-2034
   classification:
     cve-id: CVE-2022-2034
-  tags: cve,cve2022,wordpress,wp-plugin,wp
+  metadata:
+    verified: true
+  tags: cve,cve2022,wordpress,wp-plugin,wp,disclosure,sensei-lms
 
 requests:
   - method: GET
     path:
-      - "{{BaseURL}}/wp-json/wp/v2/sensei-messages/"
+      - "{{BaseURL}}/wp-json/wp/v2/sensei-messages/0"
 
     matchers-condition: and
     matchers:
-      - type: regex
+      - type: word
+        part: body
+        words:
+          - 'message":"Invalid post ID.'
+          - 'guid":{"rendered":'
+        condition: or
+
+      - type: word
         part: header
-        regex:
-          - '(?i)Location: http(s|):\/\/[\w\.\-]+\/sensei-messages\/\w+'
+        words:
+          - application/json
 
       - type: status
         status:
-          - 301
-
-    extractors:
-      - type: regex
-        part: header
-        regex:
-          - 'sensei-messages\/\w+'
+          - 404
+          - 200
+        condition: or