[FALSE-POSITIVE] CVE-2024-4439

[KristinnVikar]

Template IDs or paths

- http/cves/2024/CVE-2024-4439.yaml

Environment

- OS: Ubuntu 22.04
- Nuclei: Any
- Go:

Steps To Reproduce

Since default matcher condition is OR ¹, any webserver that responds HTTP 200 for the request POST /wp-login.php (or respond HTTP 200 to any of the other 8 requests) will match against the template, since it blindly matches against HTTP 200.

nuclei-templates/http/cves/2024/CVE-2024-4439.yaml

Lines 91 to 93 in 691a1a5

	- type: status
	status:
	- 200

Relevant dumped responses

Anything else?

No response

Footnotes

1. https://docs.projectdiscovery.io/templates/reference/matchers#matchers-condition ↩

[ritikchaddha]

Hello @KristinnVikar, we appreciate your feedback. The template has been updated.