added content-type

patch-1
Dhiyaneshwaran 2023-04-04 07:36:32 +05:30 committed by GitHub
parent 850d646c8d
commit a95e201b0a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 3 deletions

View File

@ -4,7 +4,8 @@ info:
name: Jupyter Lab - Unauthenticated Access
author: j4vaovo
severity: critical
description: JupyterLab was able to be accessed without authentication.
description: |
JupyterLab was able to be accessed without authentication.
reference:
- https://paper.seebug.org/2058/
classification:
@ -12,8 +13,8 @@ info:
cvss-metrics: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cwe-id: CWE-288
metadata:
shodan-query: http.title:"Jupyterlab"
tags: unauth,jupyter,jupyterlab
shodan-query: http.favicon.hash:450899026
tags: unauth,jupyter,jupyterlab,misconfig
requests:
- method: GET
@ -30,6 +31,11 @@ requests:
- '"schema":'
condition: and
- type: word
part: header
words:
- "application/json"
- type: status
status:
- 200