Fix: it needs at least 2 follows redirect

rapid7 · Dec 7, 2024 · c953601 · c953601
1 parent edb9fdc
commit c953601
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/exploits/multi/http/wso2_api_manager_file_upload_rce.rb b/modules/exploits/multi/http/wso2_api_manager_file_upload_rce.rb
@@ -182,7 +182,7 @@ def authenticate
       'vars_post' => auth_data
     }
 
-    res = send_request_cgi!(opts, 20, 1) # timeout and redirect_depth
+    res = send_request_cgi!(opts, 20, 2) # timeout and redirect_depth
 
     if res&.get_cookies && res.get_cookies.match(/:?WSO2_AM_TOKEN_1_Default=([\w|-]+);\s/)
       vprint_status('Got bearer token')