Create aem-wcm-suggestions-servlet.yaml

misconfiguration/aem/aem-wcm-suggestions-servlet.yaml

@@ -0,0 +1,23 @@
+id: aem-wcm-suggestions-servlet
+info:
+  author: DhiyaneshDk
+  name: AEM WCM Suggestions Servlet
+  severity: low
+  reference: https://speakerdeck.com/0ang3el/hunting-for-security-bugs-in-aem-webapps?slide=96
+  tags: aem
+
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/bin/wcm/contentfinder/connector/suggestions.json;%0aOJh.css?query_term=path%3a/&pre=<1337abcdef>&post=yyyy'
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - '<1337abcdef>'
+        condition: and