fix trailing-spaces

patch-1
Vagner Rodrigues 2023-03-21 17:25:10 -03:00
parent c6f3f96fd4
commit e18ff486ec
1 changed files with 6 additions and 6 deletions

View File

@ -1,13 +1,13 @@
id: CVE-2023-27587
info:
name: readtomyshoe - Google Cloud API Disclosure
author: vagnerd
name: readtomyshoe - Google Cloud API Disclosure
author: vagnerd
severity: high
description: |
If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google Cloud TTS request, then it will include the full URL of the request. The request URL contains the Google Cloud API key.
reference:
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27587
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27587
- https://github.com/rozbb/readtomyshoe/security/advisories/GHSA-23g5-r34j-mr8g
- https://github.com/sec-fx/CVE-2023-27587-PoC
classification:
@ -16,7 +16,7 @@ info:
cve-id: CVE-2023-27587
cwe-id: CWE-209
metadata:
shodan-query: http.html:"readtomyshoe" || title:"ReadToMyShoe"
shodan-query: http.html:"readtomyshoe" || title:"ReadToMyShoe"
verified: "true"
tags: cve,cve2023,leak,debug,readtomyshoe
@ -26,7 +26,7 @@ requests:
POST /api/add-article-by-text HTTP/1.1
Host: {{Hostname}}
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Type: application/json
{
"title":"Kernsicherheitstest",
@ -50,6 +50,6 @@ requests:
status:
- 500
- type: dsl
- type: dsl
dsl:
- '!contains((body), ''https://texttospeech.googleapis.com/v1beta1/text:synthesize?key=REDACTED'')'