Update and rename exposures/configs/env.yaml to http/vulnerabilities/generic/generic-env.yaml
parent
9320d5e9c8
commit
6cf79c00d5
|
@ -1,7 +1,7 @@
|
|||
id: env
|
||||
id: generic-env
|
||||
|
||||
info:
|
||||
name: Env file - Sensitive Information Disclosure
|
||||
name: Generic Env File Disclosure
|
||||
severity: high
|
||||
author: kazet
|
||||
description: |
|
||||
|
@ -10,7 +10,7 @@ info:
|
|||
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
|
||||
cvss-score: 8.3
|
||||
cwe-id: CWE-522
|
||||
tags: config,exposure,environment
|
||||
tags: config,exposure,env
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
|
@ -38,7 +38,6 @@ requests:
|
|||
- "{{BaseURL}}/.env.{{SD}}"
|
||||
- "{{BaseURL}}/api/.env"
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: regex
|
||||
part: body
|
Loading…
Reference in New Issue