CVE-2021-21972-vmcenter-RCE.yml

name: poc-yaml-CVE-2021-21972-vmcenter-RCE
rules:
  - method: GET
    path: /ui/vropspluginui/rest/services/uploadova
    follow_redirects: false
    expression: |
      response.status == 405
detail:
  vulnpath: "/"
  author: mamba
  description: "CVE-2021-21972 by chaosec公众号"
  links:
    - https://github.com/chaosec2021