Improve Keycloak templates

cves/2020/CVE-2020-10770.yaml

@@ -1,10 +1,10 @@
 id: CVE-2020-10770
 
 info:
-  name: Keycloak 12.0.1 - request_uri  Blind Server-Side Request Forgery (SSRF)
+  name: Keycloak <= 12.0.1 - request_uri blind Server-Side Request Forgery (SSRF)
   author: dhiyaneshDk
   severity: medium
-  description: Keycloak 12.0.1 and below allow an attacker to force the server to request an unverified URL using the OIDC parameter request_uri. This allows an attacker to execute a server-side request forgery (SSRF) attack.
+  description: Keycloak 12.0.1 and below allows an attacker to force the server to request an unverified URL using the OIDC parameter request_uri. This allows an attacker to execute a server-side request forgery (SSRF) attack.
   reference:
     - https://packetstormsecurity.com/files/164499/Keycloak-12.0.1-Server-Side-Request-Forgery.html
     - https://www.exploit-db.com/exploits/50405
@@ -14,7 +14,7 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
     cvss-score: 5.3
     cve-id: CVE-2020-10770
-    cwe-id: CWE-601
+    cwe-id: CWE-918
   tags: keycloak,ssrf,oast,cve,cve2020,blind,packetstorm,edb
 
 requests:

exposed-panels/keycloak-admin-panel.yaml

@@ -1,7 +1,7 @@
-id: key-cloak-admin-panel
+id: keycloak-admin-panel
 
 info:
-  name: Keycloak Admin Login Panel - Detect
+  name: Keycloak admin login panel - Detect
   author: incogbyte,righettod,daffainfo
   severity: info
   description: Keycloak admin login panel was detected.

exposures/configs/keycloak-openid-config.yaml

@@ -1,7 +1,7 @@
 id: keycloak-openid-config
 
 info:
-  name: Keycloak Openid Config - Detect
+  name: Keycloak OpenID configuration - Detect
   author: rodnt
   severity: info
   description: Keycloak Openid configuration information was detected.

exposures/files/keycloak-json.yaml

@@ -1,7 +1,7 @@
 id: keycloak-json
 
 info:
-  name: Keycloak Json File
+  name: Keycloak JSON file
   author: oppsec
   severity: info
   tags: exposure,keycloak,config,files

vulnerabilities/other/keycloak-xss.yaml

@@ -1,10 +1,10 @@
 id: keycloak-xss
 
 info:
-  name: Keycloak <=8.0 - Cross-Site Scripting
+  name: Keycloak <= 8.0 - Cross-Site Scripting
   author: incogbyte
   severity: info
-  description: Keycloak 8.0 and prior contains a cross-site scripting vulnerability.  An attacker can execute arbitrary script and thus steal cookie-based authentication credentials and launch other attacks.
+  description: Keycloak 8.0 and prior contains a cross-site scripting vulnerability. An attacker can execute arbitrary script and thus steal cookie-based authentication credentials and launch other attacks.
   reference:
     - https://cure53.de/pentest-report_keycloak.pdf
   classification:

workflows/keycloak-workflow.yaml

@@ -1,11 +1,11 @@
 id: keycloak-workflow
 
 info:
-  name: Keycloak Security Checks
+  name: Keycloak security checks
   author: daffainfo
   description: A simple workflow that runs all Keycloak related nuclei templates on a given target.
 
 workflows:
-  - template: exposed-panels/key-cloak-admin-panel.yaml
+  - template: exposed-panels/keycloak-admin-panel.yaml
     subtemplates:
       - tags: keycloak