added content-type
parent
850d646c8d
commit
a95e201b0a
|
@ -4,7 +4,8 @@ info:
|
||||||
name: Jupyter Lab - Unauthenticated Access
|
name: Jupyter Lab - Unauthenticated Access
|
||||||
author: j4vaovo
|
author: j4vaovo
|
||||||
severity: critical
|
severity: critical
|
||||||
description: JupyterLab was able to be accessed without authentication.
|
description: |
|
||||||
|
JupyterLab was able to be accessed without authentication.
|
||||||
reference:
|
reference:
|
||||||
- https://paper.seebug.org/2058/
|
- https://paper.seebug.org/2058/
|
||||||
classification:
|
classification:
|
||||||
|
@ -12,8 +13,8 @@ info:
|
||||||
cvss-metrics: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
cvss-metrics: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
||||||
cwe-id: CWE-288
|
cwe-id: CWE-288
|
||||||
metadata:
|
metadata:
|
||||||
shodan-query: http.title:"Jupyterlab"
|
shodan-query: http.favicon.hash:450899026
|
||||||
tags: unauth,jupyter,jupyterlab
|
tags: unauth,jupyter,jupyterlab,misconfig
|
||||||
|
|
||||||
requests:
|
requests:
|
||||||
- method: GET
|
- method: GET
|
||||||
|
@ -30,6 +31,11 @@ requests:
|
||||||
- '"schema":'
|
- '"schema":'
|
||||||
condition: and
|
condition: and
|
||||||
|
|
||||||
|
- type: word
|
||||||
|
part: header
|
||||||
|
words:
|
||||||
|
- "application/json"
|
||||||
|
|
||||||
- type: status
|
- type: status
|
||||||
status:
|
status:
|
||||||
- 200
|
- 200
|
||||||
|
|
Loading…
Reference in New Issue