diff --git a/cves/CVE-2020-5284.yaml b/cves/CVE-2020-5284.yaml index e2edd3730a..017459d586 100644 --- a/cves/CVE-2020-5284.yaml +++ b/cves/CVE-2020-5284.yaml @@ -2,19 +2,23 @@ id: CVE-2020-5284 info: name: Next.js .next/ limited path traversal - author: Harsh & Rahul + author: Harsh & Rahul & dwisiswant0 severity: medium requests: - method: GET path: - "{{BaseURL}}/_next/static/../server/pages-manifest.json" - matchers-condition: and matchers: - type: regex regex: - '\{"/_app":".*?_app\.js"' + part: body + - type: word + words: + - "application/json" + part: header - type: status status: - 200