From 2b635a352e5d93d3c3c6a9bbfef99b80f035e6b6 Mon Sep 17 00:00:00 2001
From: Geeknik Labs <466878+geeknik@users.noreply.github.com>
Date: Mon, 27 Sep 2021 20:53:50 -0500
Subject: [PATCH 1/2] Create CVE-2021-3654.yaml

---
 cves/2021/CVE-2021-3654.yaml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 cves/2021/CVE-2021-3654.yaml

diff --git a/cves/2021/CVE-2021-3654.yaml b/cves/2021/CVE-2021-3654.yaml
new file mode 100644
index 0000000000..a39cee30f4
--- /dev/null
+++ b/cves/2021/CVE-2021-3654.yaml
@@ -0,0 +1,26 @@
+id: CVE-2021-3654
+
+info:
+  name: noVNC Open Redirect
+  author: geeknik
+  severity: low
+  description: A user-controlled input redirects noVNC users to an external website.
+  tags: redirect,novnc,cve,cve2021
+
+requests:
+  - method: GET
+
+    path:
+      - '{{BaseURL}}//example.com/%2f..'
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        regex:
+          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_\.@]*)example\.com.*$'
+        part: header
+
+      - type: status
+        status:
+          - 302
+          - 301

From ca7a035303e98f49e3b641d6b15408f992baed16 Mon Sep 17 00:00:00 2001
From: Geeknik Labs <466878+geeknik@users.noreply.github.com>
Date: Mon, 27 Sep 2021 20:58:51 -0500
Subject: [PATCH 2/2] Update CVE-2021-3654.yaml

add reference
---
 cves/2021/CVE-2021-3654.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cves/2021/CVE-2021-3654.yaml b/cves/2021/CVE-2021-3654.yaml
index a39cee30f4..3fd9a96620 100644
--- a/cves/2021/CVE-2021-3654.yaml
+++ b/cves/2021/CVE-2021-3654.yaml
@@ -5,6 +5,9 @@ info:
   author: geeknik
   severity: low
   description: A user-controlled input redirects noVNC users to an external website.
+  reference:
+    - https://seclists.org/oss-sec/2021/q3/188
+    - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3654
   tags: redirect,novnc,cve,cve2021
 
 requests: