CVE-2017-14849 Exploitation Attempt

Detects the exploit attempt for Path Traversal Vulnerability

Sigma rule (View on GitHub)

 1title: CVE-2017-14849 Exploitation Attempt
 2id: 9cc1ddc8-83af-46e2-b587-1e910a9f720e
 3status: experimental
 4description:  Detects the exploit attempt for Path Traversal Vulnerability
 5references:
 6  - https://github.com/vulhub/vulhub/tree/master/node/CVE-2017-14849
 7author: Loginsoft Research Unit 
 8date: 2020/07/05
 9logsource:
10  product: Node.js
11detection:
12  selection:
13    c-uri|contains:
14    - '/static/../'
15    sc-status: 200
16  condition: selection
17falsepositives:
18  - Unknown
19level: medium```

References

to-top