diff --git a/misconfiguration/cx-cloud-upload-detect.yaml b/misconfiguration/cx-cloud-upload-detect.yaml new file mode 100644 index 0000000000..0c48de1457 --- /dev/null +++ b/misconfiguration/cx-cloud-upload-detect.yaml @@ -0,0 +1,17 @@ +id: cx-cloud-upload-detect + +info: + name: CX Cloud Unauthenticated Upload Detect + author: dhiyaneshDk + severity: info + tags: upload + +requests: + - method: GET + path: + - '{{BaseURL}}/upload.jsp' + matchers: + - type: word + words: + - "Display file upload form to the user" + condition: and