saving uncommitted changes in /etc prior to dnf run

2023-10-23 15:56:04 +03:00
parent 04237a62d6
commit 7817b40ae2
84 changed files with 6999 additions and 3629 deletions
--- a/crowdsec/hub/scenarios/crowdsecurity/CVE-2022-42889.yaml
+++ b/crowdsec/hub/scenarios/crowdsecurity/CVE-2022-42889.yaml
@@ -9,9 +9,18 @@ filter: |
  or
  Upper(PathUnescape(evt.Meta.http_path)) contains Upper('${url:UTF-8:') 
  or
-  Upper(PathUnescape(evt.Meta.http_path)) contains Upper('${dns:address|') 
+  Upper(PathUnescape(evt.Meta.http_path)) contains Upper('${dns:address|')
 blackhole: 1m
 groupby: "evt.Meta.source_ip"
 labels:
  type: exploit
  remediation: true
+  classification:
+    - attack.T1595
+    - attack.T1190
+    - cve.CVE-2022-42889
+  spoofable: 0
+  confidence: 3
+  behavior: "http:exploit"
+  label: "Text4Shell CVE-2022-42889"
+  service: apache