Added template for CVE-2024-56337

CVE-2024-56337.yaml

@@ -0,0 +1,27 @@
+id: CVE-2024-56337
+
+info:
+  name: Apache Tomcat RCE Vulnerability
+  author: ProjectDiscoveryAI
+  severity: high
+  description: |
+    Apache Tomcat is vulnerable to Remote Code Execution (RCE) on case insensitive file systems with the default servlet write enabled. This occurs when the readonly initialization parameter is set to false. This template attempts to induce an error that reveals the Tomcat version.
+  reference:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-56337
+
+http:
+  - raw:
+      - |
+        GET /?f=[ HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Nuclei
+        Accept: */*
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 500
+      - type: regex
+        regex:
+          - "Apache Tomcat/([0-9]+\\.[0-9]+\\.[0-9]+)"