From 47a3fe64e7aaa74f219bf64e2c13df51ff6de866 Mon Sep 17 00:00:00 2001 From: Metasploit Date: Mon, 13 Aug 2018 14:33:11 -0700 Subject: [PATCH] automatic module_metadata_base.json update --- db/modules_metadata_base.json | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/db/modules_metadata_base.json b/db/modules_metadata_base.json index bc8cf48d26..63e434c759 100644 --- a/db/modules_metadata_base.json +++ b/db/modules_metadata_base.json @@ -12681,6 +12681,34 @@ "ref_name": "scanner/http/cert", "check": true }, + "auxiliary_scanner/http/cgit_traversal": { + "name": "cgit Directory Traversal", + "full_name": "auxiliary/scanner/http/cgit_traversal", + "rank": 300, + "disclosure_date": "2018-08-03", + "type": "auxiliary", + "author": [ + "Google Project Zero", + "Dhiraj Mishra" + ], + "description": "This module exploits a directory traversal vulnerability which\n exists in cgit < 1.2.1 cgit_clone_objects(), reachable when the\n configuration flag enable-http-clone is set to 1 (default).", + "references": [ + "CVE-2018-14912", + "URL-https://bugs.chromium.org/p/project-zero/issues/detail?id=1627", + "EDB-45148" + ], + "is_server": false, + "is_client": false, + "platform": "", + "arch": "", + "rport": 80, + "targets": null, + "mod_time": "2018-08-13 15:48:21 +0000", + "path": "/modules/auxiliary/scanner/http/cgit_traversal.rb", + "is_install_path": true, + "ref_name": "scanner/http/cgit_traversal", + "check": true + }, "auxiliary_scanner/http/chef_webui_login": { "name": "Chef Web UI Brute Force Utility", "full_name": "auxiliary/scanner/http/chef_webui_login",