Update and rename exposures/configs/env.yaml to http/vulnerabilities/generic/generic-env.yaml

patch-1
Dhiyaneshwaran 2023-05-10 16:47:21 +05:30 committed by GitHub
parent 9320d5e9c8
commit 6cf79c00d5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 4 deletions

View File

@ -1,7 +1,7 @@
id: env
id: generic-env
info:
name: Env file - Sensitive Information Disclosure
name: Generic Env File Disclosure
severity: high
author: kazet
description: |
@ -10,7 +10,7 @@ info:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
cvss-score: 8.3
cwe-id: CWE-522
tags: config,exposure,environment
tags: config,exposure,env
requests:
- method: GET
@ -38,7 +38,6 @@ requests:
- "{{BaseURL}}/.env.{{SD}}"
- "{{BaseURL}}/api/.env"
matchers-condition: and
matchers:
- type: regex
part: body