minor -update

patch-1
pussycat0x 2023-06-10 00:29:03 +05:30 committed by GitHub
parent 9f0e7adcff
commit 197e92e2b9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 5 deletions

View File

@ -1,10 +1,10 @@
id: unauthenticated-temporal-web-ui
id: unauth-temporal-web-ui
info:
name: Unauthenticated Temporal Web UI
name: Temporal Web UI - Unauthenticated Access
author: ggranjus
severity: high
description: Temporal Web UI expose workflow's states, inputs and outputs.
description: Temporal Web UI was able to be accessed because no authentication was required
reference:
- https://docs.temporal.io/web-ui
classification:
@ -12,9 +12,9 @@ info:
cvss-score: 0.0
cwe-id: CWE-200
metadata:
max-request: 1
verified: 'true'
shodan-query: http.favicon.hash:557327884
verified: true
tags: temporal,unauth,headless
headless: