nuclei-templates/http/vulnerabilities/other/unauth-spark-api.yaml

34 lines
787 B
YAML
Raw Normal View History

2021-04-22 08:15:01 +00:00
id: unauth-spark-api
2021-04-22 08:15:01 +00:00
info:
2021-04-22 08:53:08 +00:00
name: Unauthenticated Spark REST API
2021-04-22 08:15:01 +00:00
author: princechaddha
severity: critical
description: The Spark product's REST API interface allows access to unauthenticated users.
reference:
- https://xz.aliyun.com/t/2490
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cvss-score: 10.0
cwe-id: CWE-77
remediation: Restrict access the exposed API ports.
tags: spark,unauth
metadata:
max-request: 1
2021-04-22 08:15:01 +00:00
http:
2021-04-22 08:15:01 +00:00
- method: GET
path:
- "{{BaseURL}}/v1/submissions"
matchers-condition: and
matchers:
- type: status
status:
- 400
2021-04-22 08:18:03 +00:00
- type: word
2021-04-22 08:15:01 +00:00
words:
- "Missing an action"
- "serverSparkVersion"
part: body
2021-04-22 08:16:18 +00:00
condition: and