diff --git a/db/details.json b/db/details.json index 75ff0c1..d4e4a31 100644 --- a/db/details.json +++ b/db/details.json @@ -44,5 +44,10 @@ "Description" : "The origin verification is flawed and can be bypassed using a backtick (`).", "Severity" : "High", "Exploitation" : "Set the 'Origin' header to %60.example.com" + }, + "unescaped regex" : { + "Description" : "The regex used for origin verification contains an unescaped dot (.) character.", + "Severity" : "High", + "Exploitation" : "If the target is sub.example.com, make requests from subxexample.com" } }