From dc806b301e69dca1ae00e55b68c2afae46cc9ad2 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Thu, 5 Sep 2024 11:54:59 +0530 Subject: [PATCH] minor-update --- http/cves/2024/CVE-2024-29889.yaml | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/http/cves/2024/CVE-2024-29889.yaml b/http/cves/2024/CVE-2024-29889.yaml index eb52c8a372..e23f39434a 100644 --- a/http/cves/2024/CVE-2024-29889.yaml +++ b/http/cves/2024/CVE-2024-29889.yaml @@ -20,6 +20,7 @@ info: cwe-id: CWE-89 cpe: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:* metadata: + verified: true max-request: 8 vendor: glpi-project product: glpi @@ -30,7 +31,7 @@ flow: http(1) && http(2) && http(3) && http(4) && http(5) && http(6) && http(7) http: - raw: - - |+ + - | GET /index.php?noAUTO=1 HTTP/1.1 Host: {{Hostname}} @@ -60,7 +61,7 @@ http: internal: true - raw: - - |- + - | POST /front/login.php HTTP/1.1 Host: {{Hostname}} Content-Type: application/x-www-form-urlencoded @@ -76,7 +77,7 @@ http: internal: true - raw: - - |- + - | GET /ajax/common.tabs.php?_glpi_tab=User%241&main_class=tab_cadre_fixe&_target=%2Fglpi%2Ffront%2Fpreference.php&_itemtype=Preference&id=0 HTTP/1.1 Host: {{Hostname}} @@ -90,7 +91,7 @@ http: internal: true - raw: - - |- + - | GET /front/preference.php HTTP/1.1 Host: {{Hostname}} @@ -200,7 +201,7 @@ http: internal: true - raw: - - |- + - | GET /front/preference.php HTTP/1.1 Host: {{Hostname}} @@ -214,7 +215,7 @@ http: internal: true - raw: - - |- + - | POST /ajax/pin_savedsearches.php HTTP/1.1 Host: {{Hostname}} X-Glpi-Csrf-Token: {{csrf3}} @@ -232,7 +233,7 @@ http: internal: true - raw: - - |- + - | GET /ajax/common.tabs.php?_glpi_tab=User%241&main_class=tab_cadre_fixe&_target=%2Fglpi%2Ffront%2Fpreference.php&_itemtype=Preference&id=0 HTTP/1.1 Host: {{Hostname}}