cscli appsec-rules install crowdsecurity/vpatch-CVE-2017-9841
1name: crowdsecurity/vpatch-CVE-2017-98412description: "PHPUnit RCE (CVE-2017-9841)"3rules:4 - and:5 - zones:6 - URI7 transform:8 - lowercase9 match:10 type: endsWith11 value: /util/php/eval-stdin.php12labels:13 type: exploit14 service: http15 confidence: 316 spoofable: 017 behavior: "http:exploit"18 label: "PHPUnit RCE"19 classification:20 - cve.CVE-2017-984121 - attack.T159522 - attack.T119023 - cwe.CWE-94