nuclei-templates/misconfiguration/springboot/springboot-caches.yaml

38 lines
872 B
YAML
Raw Normal View History

2022-07-28 07:31:14 +00:00
id: springboot-caches
info:
name: Springboot Actuator Caches
author: ELSFA7110
severity: low
description: The caches endpoint provides access to the application's caches.
reference:
- https://docs.spring.io/spring-boot/docs/current/actuator-api/htmlsingle/#caches
metadata:
verified: true
tags: springboot,exposure
requests:
- method: GET
path:
- "{{BaseURL}}/actuator/caches"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "cacheManagers"
- type: word
part: header
words:
- "application/json"
- "application/vnd.spring-boot.actuator"
- "application/vnd.spring-boot.actuator.v1+json"
- "application/vnd.spring-boot.actuator.v2+json"
condition: or
- type: status
status:
- 200