Update sonarqube-cve-2020-27986-unauth.yml (chaitin#1352)

* Update sonarqube-cve-2020-27986-unauth.yml * Update sonarqube-cve-2020-27986-unauth.yml
li95 · Jul 6, 2021 · f3d74f5 · f3d74f5
1 parent ab52f99
commit f3d74f5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pocs/sonarqube-cve-2020-27986-unauth.yml b/pocs/sonarqube-cve-2020-27986-unauth.yml
@@ -3,7 +3,7 @@ rules:
   - method: GET
     path: "/api/settings/values"
     expression: |
-      response.status == 200 && response.body.bcontains(bytes(string(b"sonaranalyzer-cs.nuget.packageVersion"))) && response.body.bcontains(bytes(string(b"sonar.core.id"))) && response.content_type.contains("application/json")
+      response.status == 200 && response.content_type.contains("application/json") && response.body.bcontains(bytes(string(b"sonaranalyzer-cs.nuget.packageVersion"))) && response.body.bcontains(bytes(string(b"sonar.core.id")))
 detail:
   author: pa55w0rd(www.pa55w0rd.online/)
   Affected Version: "sonarqube < 8.4.2.36762"