nuclei-templates/passive/cves/2024/CVE-2024-40711.yaml

39 lines
853 B
YAML

id: CVE-2024-40711
info:
name: Veeam Backup & Replication - Unauthenticated
author: rootxharsh,iamnoooob,DhiyaneshDK
severity: critical
description: |
A remote code execution in Veeam Backup & Replication can be exploited without authentication.
reference:
- https://x.com/codewhitesec/status/1831720125747069389?s=46
metadata:
shodan-query: html:"Veeam Backup"
verified: true
max-request: 1
tags: cve,cve2024,veeam,backup,unauth
http:
- method: GET
path:
- "{{BaseURL}}/api/v1/serverinfo"
headers:
X-Api-Version: 1.1-rev1
matchers-condition: and
matchers:
- type: word
part: body
words:
- "databaseVendor"
- type: word
part: content_type
words:
- "application/json"
- type: status
status:
- 200