template fixes (#7523)

patch-1
Sandeep Singh 2023-06-23 15:43:00 +05:30 committed by GitHub
parent c40a6cae15
commit 4c81209cce
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 32 additions and 4 deletions

View File

@ -3,7 +3,7 @@ id: odoo-database-manager
info:
name: Odoo - Database Manager Discovery
author: __Fazal,R3dg33k
severity: critical
severity: low
description: Odoo database manager was discovered.
metadata:
max-request: 1
@ -26,6 +26,4 @@ http:
- type: status
status:
- 200
# Enhanced by mp on 2022/07/15
- 200

View File

@ -0,0 +1,30 @@
id: odoo-unprotected-database
info:
name: Odoo - Unprotected Database
author: pdteam
severity: critical
description: |
The system has an Odoo application whose database manager is unprotected, indicating potential unauthorized access.
remediation: |
Implement and enforce proper authentication and access control measures to protect the Odoo database manager.
metadata:
max-request: 1
verified: true
shodan-query: title:"Odoo"
tags: odoo,database,unauth
http:
- method: GET
path:
- '{{BaseURL}}/web/database/manager'
matchers-condition: and
matchers:
- type: word
words:
- "Warning, your Odoo database manager is not protected."
- type: status
status:
- 200