Merge pull request #10652 from projectdiscovery/fix-fp-gradio

Fix Gradio False Positive
projectdiscovery · Sep 2, 2024 · d5a26aa · d5a26aa
2 parents e5c78a2 + bc0188d
commit d5a26aa
Showing 1 changed file with 6 additions and 11 deletions.
diff --git a/http/cves/2024/CVE-2024-1728.yaml b/http/cves/2024/CVE-2024-1728.yaml
@@ -60,15 +60,10 @@ http:
         - /windows/win.ini
 
     stop-at-first-match: true
-    matchers-condition: and
     matchers:
-      - type: regex
-        regex:
-          - "root:.*:0:0:"
-          - "\\[(font|extension|file)s\\]"
-        condition: or
-
-      - type: status
-        status:
-          - 200
-# digest: 4a0a0047304502200f825f20fad4b54e4c1edb052482ff3d57c02b63e05a9cf6227b37d39ebee112022100b36cc92a5b2685c8da867167fa0fdc31e99e6d9d6a461ff14467d518c3904dc2:922c64590222798bb761d5b6d8e72950
+      - type: dsl
+        dsl:
+          - 'contains_all(body,"bit app support","fonts","extensions") || regex("root:.*:0:0:", body)'
+          - 'status_code == 200'
+        condition: and
+# digest: 4a0a0047304502200f825f20fad4b54e4c1edb052482ff3d57c02b63e05a9cf6227b37d39ebee112022100b36cc92a5b2685c8da867167fa0fdc31e99e6d9d6a461ff14467d518c3904dc2:922c64590222798bb761d5b6d8e72950