dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

remove rubocop exemption no longer required

This commit is contained in:
Jeffrey Martin 2021-11-23 07:58:07 -06:00
parent 08a1fb0c8e
commit d802a9ee0b
No known key found for this signature in database
GPG Key ID: 0CD9BBC2AF15F171
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/exploits/multi/http/php_fpm_rce.rb
View File

@ -130,9 +130,7 @@ class MetasploitModule < Msf::Exploit::Remote
if qsl_delta.odd?
fail_with Failure::Unknown, "Got odd qslDelta, that means the URL encoding gone wrong: path=#{path}, qsl_delta=#{qsl_delta}"
end
# rubocop:disable Lint/UriEscapeUnescape
prefix = cmd.empty? ? '' : "#{@http_param}=#{URI::DEFAULT_PARSER.escape(cmd)}%26"
# rubocop:enable Lint/UriEscapeUnescape
qsl_prime = qsl - qsl_delta / 2 - prefix.length
if qsl_prime < 0
fail_with Failure::Unknown, "QSL value too small to fit the command: QSL=#{qsl}, qsl_delta=#{qsl_delta}, prefix (size=#{prefix.size})=#{prefix}"