Skip to content
40 changes: 40 additions & 0 deletions CVE-2022-24493.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
# Welcome to Nuclei Templates
# Learn more at: https://docs.projectdiscovery.io/templates/introduction

id: CVE-2022-24493 # Unique identifier for the template

info:
name: Microsoft LSA Server - Information Disclosure
author: your-name # Template creator's name or handle
severity: medium
description: Simple HTTP GET request with status code matcher # Brief explanation of what this template does.
reference:
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24493
- https://nvd.nist.gov/vuln/detail/CVE-2022-24493
classification:
cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
cvss-score: 5.5
cve-id: CVE-2022-24493
epss-score: 0.00435
epss-percentile: 0.61948
cpe: cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
metadata:
vendor: microsoft
product: windows_10
shodan-query: cpe:"cpe:2.3:o:microsoft:windows_10"
max-request: 1
tags: example,cve,cve2022
remediation: |
Apply the latest security patches and updates from Microsoft.
impact: |
Attackers can retrieve sensitive system information, potentially aiding further malicious activities.

http:
- method: GET # HTTP method to use
path:
- "{{BaseURL}}/robots.txt" # Request path

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CVE-2022-24493.yaml (Line 36)

Weak Matcher Detected

Status code matchers alone may cause false positives (rule-based analysis)

⚠️ Consider using more specific matchers to reduce false positives.

Error Details:

Consider adding content matchers (word/regex) to improve detection accuracy. Note: In multi-request or chained templates, status-only matchers may be appropriate.

This issue requires manual investigation and cannot be auto-fixed.

matchers:
- type: status
status:
- 200
Loading