-
Notifications
You must be signed in to change notification settings - Fork 3.1k
Closed
Labels
DoneReady to mergeReady to mergefalse-positiveNuclei template reporting invalid/unexpected resultNuclei template reporting invalid/unexpected result
Description
Template IDs or paths
- CVE-2024-2782Environment
Steps To Reproduce
The matcher is very weak. Some APIs respond with status code 200 to any request. The matcher for word true is not enough, as other JSON responses may include the word too. It should be fixed with a stronger matcher, e.g. checking if the reponse is exactly "true" or if the response includes other data or HTTP headers.
Relevant dumped responses
Anything else?
No response
Metadata
Metadata
Assignees
Labels
DoneReady to mergeReady to mergefalse-positiveNuclei template reporting invalid/unexpected resultNuclei template reporting invalid/unexpected result