Lint

rapid7 · Dec 5, 2024 · b8ec13e · b8ec13e
1 parent ca45c64
commit b8ec13e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/exploits/unix/webapp/cyberpanel_preauth_rce_multi_cve.rb b/modules/exploits/unix/webapp/cyberpanel_preauth_rce_multi_cve.rb
@@ -148,7 +148,7 @@ def execute_payload(action, injected_payload)
       payload_data = post_data.to_s
 
       headers['X-CSRFToken'] = csrf_token
-      headers['Referer'] = "#{(datastore['SSL'] ? 'https' : 'http')}://#{datastore['RHOST']}:#{datastore['RPORT']}#{normalize_uri(target_uri.path, 'filemanager/upload')}"
+      headers['Referer'] = "#{datastore['SSL'] ? 'https' : 'http'}://#{datastore['RHOST']}:#{datastore['RPORT']}#{normalize_uri(target_uri.path, 'filemanager/upload')}"
       headers['Cookie'] = "csrftoken=#{csrf_token}"
       ctype = "multipart/form-data; boundary=#{post_data.bound}"