Merge pull request #3727 from evanRubinsteinIT/pollbot-redirect

Added pollbot-redirect

vulnerabilities/other/pollbot-redirect.yaml

@@ -0,0 +1,26 @@
+id: pollbot-redirect
+info:
+  name: Mozilla Pollbot Services - Unauthenticated Open Redirect
+  author: Evan Rubinstien
+  severity: medium
+  description: Mozilla has a medium severity open redirect vulnerability in pollbot that could be used for social engineering attaks.
+  reference:
+    - https://bugzilla.mozilla.org/show_bug.cgi?id=1753838
+    - https://github.com/mozilla/PollBot
+  tags: redirect,mozilla,pollbot
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/%0A/example.com/'
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        part: header
+        regex:
+          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)example\.com\/?(\/|[^.].*)?$' # https://regex101.com/r/ZDYhFh/1
+
+      - type: status
+        status:
+          - 301