From a1b2b5f3ef1727bd88848ebb892e33ef668fe62b Mon Sep 17 00:00:00 2001 From: MostInterestingBotInTheWorld <98333686+MostInterestingBotInTheWorld@users.noreply.github.com> Date: Mon, 13 Feb 2023 10:27:33 -0500 Subject: [PATCH] Enhancement: exposures/configs/debug-vars.yaml by cs --- exposures/configs/debug-vars.yaml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/exposures/configs/debug-vars.yaml b/exposures/configs/debug-vars.yaml index 171020e04c..06f63456cb 100644 --- a/exposures/configs/debug-vars.yaml +++ b/exposures/configs/debug-vars.yaml @@ -3,8 +3,12 @@ id: debug-vars info: name: Golang Expvar - Detect author: luqman - severity: low + severity: info description: Golang expvar function exposes multiple public variables via HTTP such as stack trace information and server operation counters. + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0.0 + cwe-id: CWE-200 tags: go,debug,exposure requests: @@ -24,4 +28,4 @@ requests: status: - 200 -# Enhanced by md on 2023/02/09 +# Enhanced by cs on 2023/02/13