nuclei-templates/http/exposed-panels/sidekiq-dashboard.yaml

id: sidekiq-dashboard

info:
  name: Sidekiq Dashboard Panel - Detect
  author: dhiyaneshDK,AmirMSafari
  severity: medium
  description: Sidekiq Dashboard panel was detected.
  reference:
    - https://sidekiq.org
    - https://github.com/mperham/sidekiq
    - https://github.com/mperham/sidekiq/wiki/Monitoring
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    cvss-score: 5.3
    cwe-id: CWE-200
    cpe: cpe:2.3:a:contribsys:sidekiq:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: contribsys
    product: sidekiq
    fofa-query: title="sidekiq"
    shodan-query: http.title:"sidekiq"
    google-query: intitle:"sidekiq"
  tags: unauth,panel,sidekiq,contribsys

http:
  - method: GET
    path:
      - "{{BaseURL}}/sidekiq"

    redirects: true
    max-redirects: 3

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - <title>Sidekiq</title>
          - <title>Sidekiq Enterprise</title>
        condition: or

      - type: status
        status:
          - 200
# digest: 4a0a0047304502201a3604114e2bfdb473b3043d8a6efd499a3d7a1c4cb6b5cbbabc172493a91cbe02210094c4847f0c98c418ce200bc1a533e7da9e6b47e02056e911885b3be5a5a68ff4:922c64590222798bb761d5b6d8e72950
Add files via upload 2020-09-29 08:38:09 +00:00			`id: sidekiq-dashboard`

			`info:`
updated severity, cvss , name 2023-02-06 20:14:38 +00:00			`name: Sidekiq Dashboard Panel - Detect`
Resolve some issues to capture missed items 2023-10-05 17:04:07 +00:00			`author: dhiyaneshDK,AmirMSafari`
updated severity, cvss , name 2023-02-06 20:14:38 +00:00			`severity: medium`
			`description: Sidekiq Dashboard panel was detected.`
Update and rename misconfiguration/sidekiq-dashboard.yaml to exposed-panels/sidekiq-dashboard.yaml Added references. Moved template to exposed-panels. 2021-08-18 19:44:12 +00:00			`reference:`
			`- https://sidekiq.org`
			`- https://github.com/mperham/sidekiq`
Severity and other cleanups 2023-02-02 23:05:19 +00:00			`- https://github.com/mperham/sidekiq/wiki/Monitoring`
Enhancement: exposed-panels/sidekiq-dashboard.yaml by md 2023-01-18 15:25:57 +00:00			`classification:`
updated severity, cvss , name 2023-02-06 20:14:38 +00:00			`cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`
			`cvss-score: 5.3`
Enhancement: exposed-panels/sidekiq-dashboard.yaml by md 2023-01-18 15:25:57 +00:00			`cwe-id: CWE-200`
Add CPE classification to templates (#9420) * Add CPE classification to templates * misc fix * added tags * format updates * Revert "format updates" This reverts commit b93658be4b50c929d15082258e4d11a15b12cbd8. --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2024-03-26 08:03:04 +00:00			`cpe: cpe:2.3:a:contribsys:sidekiq::::::::`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
TemplateMan Update [Sat Mar 23 09:28:19 UTC 2024] :robot: 2024-03-23 09:28:19 +00:00			`max-request: 1`
Revert "TemplateMan Update [Mon Apr 8 11:30:07 UTC 2024] :robot:" This reverts commit 433dda4ae5b824564b44075bb95a96ecdbe263a6. 2024-04-08 11:34:33 +00:00			`vendor: contribsys`
TemplateMan Update [Fri Jun 7 10:04:28 UTC 2024] :robot: 2024-06-07 10:04:29 +00:00			`product: sidekiq`
			`fofa-query: title="sidekiq"`
			`shodan-query: http.title:"sidekiq"`
			`google-query: intitle:"sidekiq"`
Add CPE classification to templates (#9420) * Add CPE classification to templates * misc fix * added tags * format updates * Revert "format updates" This reverts commit b93658be4b50c929d15082258e4d11a15b12cbd8. --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2024-03-26 08:03:04 +00:00			`tags: unauth,panel,sidekiq,contribsys`
Add files via upload 2020-09-29 08:38:09 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Add files via upload 2020-09-29 08:38:09 +00:00			`- method: GET`
			`path:`
			`- "{{BaseURL}}/sidekiq"`

Resolve some issues to capture missed items 2023-10-05 17:04:07 +00:00			`redirects: true`
			`max-redirects: 3`
templateman update 2023-10-14 11:27:55 +00:00
Update sidekiq-dashboard.yaml 2023-10-07 19:41:40 +00:00			`matchers-condition: and`
Add files via upload 2020-09-29 08:38:09 +00:00			`matchers:`
			`- type: word`
updated severity, cvss , name 2023-02-06 20:14:38 +00:00			`part: body`
Add files via upload 2020-09-29 08:38:09 +00:00			`words:`
			`- <title>Sidekiq</title>`
Resolve some issues to capture missed items 2023-10-05 17:04:07 +00:00			`- <title>Sidekiq Enterprise</title>`
			`condition: or`
Add files via upload 2020-09-29 08:38:09 +00:00
			`- type: status`
			`status:`
			`- 200`
Auto Template Signing [Sat Jun 8 16:02:16 UTC 2024] :robot: 2024-06-08 16:02:17 +00:00			`# digest: 4a0a0047304502201a3604114e2bfdb473b3043d8a6efd499a3d7a1c4cb6b5cbbabc172493a91cbe02210094c4847f0c98c418ce200bc1a533e7da9e6b47e02056e911885b3be5a5a68ff4:922c64590222798bb761d5b6d8e72950`