Skip to content

Commit 2e1d46d

Browse files
tooryxcopybara-github
authored andcommitted
Restrict the regexp used to detect the CVE-2023-26360 vulnerability to reduce false positives.
PiperOrigin-RevId: 803452526 Change-Id: I77583aeb3f29b3bf865cd85789529cca962411e4
1 parent 01aa9da commit 2e1d46d

File tree

1 file changed

+1
-1
lines changed
  • community/detectors/adobe_coldfusion_cve_2023_26360/src/main/java/com/google/tsunami/plugins/detectors/cves/cve202326360

1 file changed

+1
-1
lines changed

community/detectors/adobe_coldfusion_cve_2023_26360/src/main/java/com/google/tsunami/plugins/detectors/cves/cve202326360/Cve202326360Detector.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ public final class Cve202326360Detector implements VulnDetector {
7373
ImmutableList.of(VULNERABLE_REQUEST_BODY_WINDOWS, VULNERABLE_REQUEST_BODY_LINUX);
7474

7575
private static final Pattern VULNERABLE_RESPONSE_PATTERN =
76-
Pattern.compile("password=|root:[x*]:0:0:");
76+
Pattern.compile("</wddxPacket>root:[x*]:0:0:");
7777

7878
private final HttpClient httpClient;
7979
private final Clock utcClock;

0 commit comments

Comments
 (0)