Merge pull request #10188 from gy741/rule-add-v156

Create CVE-2024-33605.yaml

http/cves/2024/CVE-2024-33605.yaml

@@ -0,0 +1,47 @@
+id: CVE-2024-33605
+
+info:
+  name: Sharp Multifunction Printers - Directory Listing
+  author: gy741
+  severity: high
+  description: |
+    It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file.
+  remediation: |
+    Apply all relevant security patches and product upgrades.
+  reference:
+    - https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html#pre-auth-arbitrary-directory-listing
+    - https://jvn.jp/en/vu/JVNVU93051062/index.html
+    - https://global.sharp/products/copier/info/info_security_2024-05.html
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
+    cvss-score: 7.5
+    cve-id: CVE-2024-33605
+    cwe-id: CWE-22
+  metadata:
+    verified: true
+    max-request: 1
+    shodan-query: "Set-Cookie: MFPSESSIONID="
+  tags: cve,cve2024,sharp,printer,traversal
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/installed_emanual_list.html"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'ServiceEmanualList'
+          - '/installed_emanual_down.html'
+        condition: and
+
+      - type: word
+        part: header
+        words:
+          - "Set-Cookie: MFPSESSIONID="
+
+      - type: status
+        status:
+          - 200

http/misconfiguration/forgejo-repo-exposure.yaml

@@ -29,5 +29,4 @@ http:
 
       - type: status
         status:
-          - 200
-# digest: 490a004630440220323803a87fd83c16c741b5400f926a23ca34e01d18749f6a47449055f1e170b802203295a66f6e1f6c4a2cd0fce865372bd0994dab5180b4be4a8a55437fee2eb379:922c64590222798bb761d5b6d8e72950
+          - 200

http/misconfiguration/installer/piwigo-installer.yaml

@@ -27,4 +27,3 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100c382041d545e775c4b67e885b999f3ca6f2b8bcca34ccb81cdde7911f97c3271022011996dfc883994cdaea0c584ef2908ab4d9863744267250794a2b33119139e4c:922c64590222798bb761d5b6d8e72950