diff --git a/misconfiguration/airflow/airflow-debug.yaml b/misconfiguration/airflow/airflow-debug.yaml new file mode 100644 index 0000000000..dc6f4a4a58 --- /dev/null +++ b/misconfiguration/airflow/airflow-debug.yaml @@ -0,0 +1,26 @@ +id: airflow-debug + +info: + name: Airflow Debug Trace + author: pdteam + severity: low + tags: apache,airflow,fpd + +requests: + - method: GET + path: + - "{{BaseURL}}/admin/airflow/login" + + matchers-condition: and + matchers: + + - type: word + part: body + words: + - "

Ooops.

" + - "Traceback (most recent call last)" + condition: and + + - type: status + status: + - 500 \ No newline at end of file diff --git a/misconfiguration/unauthenticated-airflow.yaml b/misconfiguration/airflow/unauthenticated-airflow.yaml similarity index 100% rename from misconfiguration/unauthenticated-airflow.yaml rename to misconfiguration/airflow/unauthenticated-airflow.yaml diff --git a/workflows/airflow-workflow.yaml b/workflows/airflow-workflow.yaml index 1a21c5ba10..8a5a9164e8 100644 --- a/workflows/airflow-workflow.yaml +++ b/workflows/airflow-workflow.yaml @@ -14,5 +14,5 @@ workflows: - template: cves/2020/CVE-2020-13927.yaml - template: exposed-panels/airflow-panel.yaml - template: exposures/configs/airflow-configuration-exposure.yaml - - template: misconfiguration/unauthenticated-airflow.yaml - - template: default-logins/apache/airflow-default-credentials.yaml \ No newline at end of file + - template: default-logins/apache/airflow-default-credentials.yaml + - template: misconfiguration/airflow/ \ No newline at end of file