diff --git a/exposures/configs/django-variables-exposed.yaml b/exposures/configs/django-variables-exposed.yaml index e69c00f579..adcdc28b82 100644 --- a/exposures/configs/django-variables-exposed.yaml +++ b/exposures/configs/django-variables-exposed.yaml @@ -1,14 +1,18 @@ id: django-variables-exposed info: - name: Exposed Django variables + name: Django Config - Detect author: nobody severity: info - description: Detects suspicious Django web application framework exceptions that could indicate exploitation attempts + description: Django configuration was detected, which could reveal web application framework exceptions that could indicate exploitation attempts. reference: - https://docs.djangoproject.com/en/1.11/ref/exceptions/ - https://docs.djangoproject.com/en/1.11/topics/logging/#django-security - - https://github.com/projectdiscovery/nuclei-templates/blob/master/file/logs/django-framework-exceptions.yaml + - https://github.com/projectdiscovery/nuclei-templates/blob/master/file/logs/django-framework- + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N + cvss-score: 5.3 + cwe-id: CWE-200exceptions.yaml metadata: verified: true tags: exposure,config,django @@ -45,3 +49,5 @@ requests: - type: status status: - 400 + +# Enhanced by mp on 2023/02/05