nuclei-templates/vulnerabilities/jira/jira-unauthenticated-projec...

id: jira-unauthenticated-projects

info:
  name: Jira Unauthenticated Projects
  author: TechbrunchFR
  severity: info
  tags: atlassian,jira

requests:
  - method: GET
    path:
      - "{{BaseURL}}/rest/api/2/project?maxResults=100"
    matchers:
      - type: word
        words:
          - 'projects'
          - 'startAt'
          - 'maxResults'
        condition: and
Create jira-unauthenticated-projects.yaml If public sharing is ON it allows users to share projects with all users including those that are not logged in. Those projects could reveal potentially sensitive information. 2020-07-06 16:03:33 +00:00			`id: jira-unauthenticated-projects`

			`info:`
			`name: Jira Unauthenticated Projects`
			`author: TechbrunchFR`
misc changes 2021-02-10 16:37:17 +00:00			`severity: info`
			`tags: atlassian,jira`
Update jira-unauthenticated-projects.yaml 2020-07-06 17:00:26 +00:00
			`requests:`
Create jira-unauthenticated-projects.yaml If public sharing is ON it allows users to share projects with all users including those that are not logged in. Those projects could reveal potentially sensitive information. 2020-07-06 16:03:33 +00:00			`- method: GET`
			`path:`
			`- "{{BaseURL}}/rest/api/2/project?maxResults=100"`
			`matchers:`
			`- type: word`
			`words:`
			`- 'projects'`
			`- 'startAt'`
			`- 'maxResults'`
			`condition: and`