Create jfrog-unauth-build-exposed.yaml

vulnerabilities/other/jfrog-unauth-build-exposed.yaml

@@ -0,0 +1,34 @@
+id: jfrog-unauth-build-exposed
+
+info:
+  name: JFrog Unauthentication Builds
+  author: dhiyaneshDK
+  severity: medium
+  tags: jfrog
+
+requests:
+  - raw:
+      - |
+        POST /ui/api/v1/global-search/builds?jfLoader=true HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4271.0 Safari/537.36
+        X-Requested-With: XMLHttpRequest
+        Content-Type: application/json
+        
+        {"name":"","before":"","after":"","direction":"desc","order_by":"date","num_of_rows":100}
+    matchers:
+      - type: word
+        words:
+          - "last_build_number"
+          - "build_name"
+        condition: and
+        part: body
+
+      - type: word
+        words:
+          - application/json
+        part: header
+
+      - type: status
+        status:
+          - 200