Merge pull request #832 from projectdiscovery/princechaddha-patch-1

Create jira-unauthenticated-projectcategories.yaml

README.md

@@ -34,7 +34,7 @@ An overview of the nuclei template directory including number of templates assoc
 | fuzzing         | 4           | helpers          | 2        |
 | miscellaneous   | 12     | misconfiguration | 40 |
 | takeovers       | 1         | technologies     | 45     |
-| vulnerabilities | 77 | workflows        | 18        |
+| vulnerabilities | 78 | workflows        | 18        |
 
 
 **Tree structure of nuclei templates:**
@@ -525,6 +525,7 @@ An overview of the nuclei template directory including number of templates assoc
 │   │   ├── jira-unauthenticated-adminprojects.yaml
 │   │   ├── jira-unauthenticated-dashboards.yaml
 │   │   ├── jira-unauthenticated-popular-filters.yaml
+│   │   ├── jira-unauthenticated-projectcategories.yaml
 │   │   ├── jira-unauthenticated-projects.yaml
 │   │   ├── jira-unauthenticated-resolutions.yaml
 │   │   └── jira-unauthenticated-user-picker.yaml
@@ -619,7 +620,7 @@ An overview of the nuclei template directory including number of templates assoc
 
 </details>
 
-**55 directories, 517 files**.
+**55 directories, 518 files**.
 
 📖 Documentation
 -----

vulnerabilities/jira/jira-unauthenticated-projectcategories.yaml

@@ -0,0 +1,31 @@
+id: jira-unauthenticated-projectcategories
+
+info:
+  name: Jira Unauthenticated Project Categories
+  author: TESS
+  severity: low
+  tags: atlassian,jira
+
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/rest/api/2/projectCategory?maxResults=1000"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'self'
+          - 'description'
+          - 'name'
+        condition: and
+
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: header
+        words:
+          - "atlassian.xsrf.token"