From 205b214ddab4cfe2add95ffcdafc237a3148c4e9 Mon Sep 17 00:00:00 2001 From: Somdev Sangwan Date: Mon, 25 Nov 2019 10:20:45 +0530 Subject: [PATCH] add unescaped regex test --- db/details.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/db/details.json b/db/details.json index 75ff0c1..d4e4a31 100644 --- a/db/details.json +++ b/db/details.json @@ -44,5 +44,10 @@ "Description" : "The origin verification is flawed and can be bypassed using a backtick (`).", "Severity" : "High", "Exploitation" : "Set the 'Origin' header to %60.example.com" + }, + "unescaped regex" : { + "Description" : "The regex used for origin verification contains an unescaped dot (.) character.", + "Severity" : "High", + "Exploitation" : "If the target is sub.example.com, make requests from subxexample.com" } }