nuclei-templates/misconfiguration/solr-query-dashboard.yaml

29 lines
591 B
YAML
Raw Normal View History

2021-03-07 13:46:57 +00:00
id: solr-admin-query
info:
name: Solr - Admin Page Access
2021-03-07 13:46:57 +00:00
author: dhiyaneshDK
severity: high
description: Solr's admin page was able to be accessed with no authentication requirements in place.
reference:
- https://www.exploit-db.com/ghdb/5856
tags: solr,unauth,edb
2021-03-07 13:46:57 +00:00
requests:
- method: GET
path:
- '{{BaseURL}}/admin/'
- '{{BaseURL}}/solr/admin/'
matchers-condition: and
matchers:
- type: word
words:
- '<title>Solr admin page</title>'
2021-08-09 16:28:28 +00:00
2021-03-07 13:46:57 +00:00
- type: status
status:
- 200
# Enhanced by mp on 2022/07/21