nuclei-templates/misconfiguration/sonarqube-public-projects.yaml

28 lines
575 B
YAML
Raw Normal View History

2021-04-14 10:19:06 +00:00
id: sonarqube-public-projects
info:
name: Sonarqube with public projects
author: sickwell
2021-04-14 10:24:40 +00:00
severity: low
2021-04-14 10:19:06 +00:00
tags: sonarqube,misconfig
2021-04-14 10:24:40 +00:00
reference: https://next.sonarqube.com/sonarqube/web_api/api/components/suggestions?internal=true
2021-04-14 10:19:06 +00:00
requests:
- method: GET
path:
2021-04-14 10:28:18 +00:00
- "{{BaseURL}}/api/components/suggestions?recentlyBrowsed="
2021-04-14 10:19:06 +00:00
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- 'results'
- 'items'
- 'more'
part: body
condition: and