diff --git a/http/misconfiguration/installer/confluence-installer.yaml b/http/misconfiguration/installer/confluence-installer.yaml new file mode 100644 index 0000000000..a994a54642 --- /dev/null +++ b/http/misconfiguration/installer/confluence-installer.yaml @@ -0,0 +1,29 @@ +id: confluence-installer + +info: + name: Confluence Installation Page - Exposure + author: DhiyaneshDK + severity: high + description: | + Confluence is susceptible to the Installation page exposure due to misconfiguration. + metadata: + verified: true + max-request: 1 + shodan-query: title:"Choose your deployment type - Confluence" + tags: misconfig,exposure,install,confluence + +http: + - method: GET + path: + - "{{BaseURL}}/setup/setupcluster-start.action" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Choose your deployment type - Confluence" + + - type: status + status: + - 200