nuclei-templates/http/misconfiguration/sonarqube-public-projects.yaml

31 lines
808 B
YAML
Raw Normal View History

2021-04-14 10:19:06 +00:00
id: sonarqube-public-projects
info:
name: Sonarqube with public projects
author: sickwell
2021-04-14 10:24:40 +00:00
severity: low
reference:
- https://next.sonarqube.com/sonarqube/web_api/api/components/suggestions?internal=true
metadata:
max-request: 1
2023-10-14 11:27:55 +00:00
tags: sonarqube,misconfig
2021-04-14 10:19:06 +00:00
http:
2021-04-14 10:19:06 +00:00
- method: GET
path:
2021-04-14 10:28:18 +00:00
- "{{BaseURL}}/api/components/suggestions?recentlyBrowsed="
2021-04-14 10:19:06 +00:00
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
2021-04-28 09:43:16 +00:00
- '"results":'
- '"items":'
- '"more":'
2021-04-14 10:19:06 +00:00
part: body
2023-10-14 11:27:55 +00:00
condition: and
# digest: 490a0046304402207901c24b44f1388a4323def4f00faffb69cc506cbecd69cbc59841fe2ca240af02205eb7573ca9939e6241f0415543079c0da99d306e66b8bcbf2c9ed45995329179:922c64590222798bb761d5b6d8e72950