Fix misconfiguration of ETCD API by ensuring correct response types a… (#6852)
* Fix misconfiguration of ETCD API by ensuring correct response types and body words. * updated tag * more tags --------- Co-authored-by: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com>patch-1
parent
68a68b929e
commit
3ec1aab852
|
@ -6,26 +6,31 @@ info:
|
|||
severity: high
|
||||
reference:
|
||||
- https://hackerone.com/reports/1088429
|
||||
tags: hackerone,unauth
|
||||
tags: misconfig,hackerone,unauth,etcd
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/v2/auth/roles"
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- '"roles"'
|
||||
- '"permissions"'
|
||||
- '"role"'
|
||||
- '"kv"'
|
||||
condition: and
|
||||
part: body
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
words:
|
||||
- "text/plain"
|
||||
- "application/json"
|
||||
condition: or
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
|
Loading…
Reference in New Issue