From 61d8a26844f11549e37b4603fa43aae31801e403 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Sun, 28 Aug 2022 00:33:56 +0530 Subject: [PATCH 1/2] Create aem-crx-namespace.yaml --- misconfiguration/aem/aem-crx-namespace.yaml | 35 +++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 misconfiguration/aem/aem-crx-namespace.yaml diff --git a/misconfiguration/aem/aem-crx-namespace.yaml b/misconfiguration/aem/aem-crx-namespace.yaml new file mode 100644 index 0000000000..f7434bae32 --- /dev/null +++ b/misconfiguration/aem/aem-crx-namespace.yaml @@ -0,0 +1,35 @@ +id: aem-crx-namespace + +info: + name: Adobe AEM CRX Namespace Editor Exposure + author: dhiyaneshDk + severity: medium + reference: + - https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/Web-Content/aem2.txt + metadata: + shodan-query: + - http.title:"AEM Sign In" + - http.component:"Adobe Experience Manager" + tags: exposure,aem,adobe + +requests: + - method: GET + path: + - "{{BaseURL}}/crx/explorer/ui/namespace_editor.jsp" + + matchers-condition: and + matchers: + - type: word + words: + - 'Namespaces' + - 'The following namespaces are registered in the repository:' + condition: and + + - type: word + part: header + words: + - text/html + + - type: status + status: + - 200 From e1371dfe2db6d4dd8280b50a0955484701f1729c Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Mon, 29 Aug 2022 13:10:15 +0530 Subject: [PATCH 2/2] Update aem-crx-namespace.yaml --- misconfiguration/aem/aem-crx-namespace.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/misconfiguration/aem/aem-crx-namespace.yaml b/misconfiguration/aem/aem-crx-namespace.yaml index f7434bae32..d51e4428e1 100644 --- a/misconfiguration/aem/aem-crx-namespace.yaml +++ b/misconfiguration/aem/aem-crx-namespace.yaml @@ -3,7 +3,7 @@ id: aem-crx-namespace info: name: Adobe AEM CRX Namespace Editor Exposure author: dhiyaneshDk - severity: medium + severity: low reference: - https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/Web-Content/aem2.txt metadata: