projectdiscovery / nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.
https://github.com/projectdiscovery/nuclei
MIT License
8.99k stars 2.57k forks source link

Matcher too wide #10437

Closed iamxhunt3r closed 1 week ago

iamxhunt3r commented 1 month ago

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12149.yaml#L14

Above template matcher is way too wide leading to FP's

princechaddha commented 3 weeks ago

Hello, the response time for this issue was longer than usual because the team was traveling for DEFCON. The team will respond to this issue shortly. Thank you for your contribution

ritikchaddha commented 1 week ago

Hello @iamxhunt3r, thank you so much for creating this issue. I've updated and added the additional word matcher to fix the false positive.