More lax version string detection

doyensec · Aug 28, 2024 · bd1c118 · bd1c118
1 parent 2c510cc
commit bd1c118
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/...in/java/com/google/tsunami/plugins/detectors/cves/cve202434102/MagentoCosmicStingXxe.java b/...in/java/com/google/tsunami/plugins/detectors/cves/cve202434102/MagentoCosmicStingXxe.java
@@ -166,8 +166,7 @@ private String detectMagentoVersion(NetworkService networkService) {
 
     try {
       HttpResponse response = this.httpClient.send(req, networkService);
-      if (response.status().code() == HttpStatus.OK.code()
-          && response.bodyString().orElse("").startsWith("Magento")) {
+      if (response.status() == HttpStatus.OK && response.bodyString().orElse("").contains("Magento")) {
         String version = response.bodyString().get();
         logger.atInfo().log("Detected Magento version: '%s'", version);
         return version;