nuclei-templates/misconfiguration/unauthenticated-tensorboard...

29 lines
629 B
YAML
Raw Normal View History

2021-05-16 15:34:58 +00:00
id: unauthenticated-tensorboard
info:
name: Tensorflow Tensorboard - Unauthenticated Access
2021-05-16 15:34:58 +00:00
author: dhiyaneshDk
description: Tensorflow Tensorboard was able to be accessed with no authentication requirements in place.
2021-05-16 15:34:58 +00:00
severity: high
tags: tensorflow,tensorboard,unauth
requests:
- method: GET
path:
- '{{BaseURL}}/data/plugins_listing'
matchers-condition: and
matchers:
- type: word
words:
- 'scalars'
- 'loading_mechanism'
- 'custom_scalars'
condition: and
- type: status
status:
- 200
# Enhanced by mp on 2022/07/20