Skip to content

Commit 4845b4b

Browse files
author
Ricardo Almeida
committed
Orientdb 2.2.x RCE - Fix regular expression for version detection
1 parent 3066492 commit 4845b4b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/exploits/multi/http/orientdb_exec.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ def check
5252
uri = target_uri
5353
uri.path = normalize_uri(uri.path)
5454
res = send_request_raw({'uri' => "#{uri.path}listDatabases"})
55-
if res and res.code == 200 and res.headers['Server'] =~ /OrientDB Server v\.2\.2\.[2-9]|1[0-9]|2[0-2]/
55+
if res and res.code == 200 and res.headers['Server'] =~ /OrientDB Server v\.2\.2\./
5656
print_good("Version: #{res.headers['Server']}")
5757
return Exploit::CheckCode::Vulnerable
5858
else

0 commit comments

Comments
 (0)