CVE-2018-11784.yaml

id:  CVE-2018-11784

info:
  name:  Apache Tomcat Open Redirect
  author: medbsq
  severity: hight 

requests:
  - method: GET
    path:
      - "{{BaseURL}}//bing.com"
    headers:
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "(?m)^(L|l)ocation: (((http|https):)?//(www.)?)?bing.com"
        part: header