mirror of
https://github.com/elastic/detection-rules
synced 2026-06-08 14:00:08 +00:00
Terrance DeJesus
05704938ca
* [New Rule] BBR - Potential React.JS CVE-2025-55182 Exploit Attempt
Fixes #5406
* updated descriptions
* changed to EQL
* adjusted note
* Update rules_building_block/initial_access_react_server_components_rce_attempt.toml
Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>
* adjusted query
* adding anomalous RSC BBR rule; adusted query to be react2shell RCE specific
* updated BBR
* removed BBR react2shell rule
* adjusted regex to not be proto focused
* Update rules/network/initial_access_react_server_components_rce_attempt.toml
Co-authored-by: Mika Ayenson, PhD <Mikaayenson@users.noreply.github.com>
* adjusted query
* removed constructor requirement
---------
Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>
Co-authored-by: Mika Ayenson, PhD <Mikaayenson@users.noreply.github.com>
(cherry picked from commit 0b949910a5)