added content-type

patch-1
Dhiyaneshwaran 2023-04-04 07:36:32 +05:30 committed by GitHub
parent 850d646c8d
commit a95e201b0a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 3 deletions

View File

@ -4,7 +4,8 @@ info:
name: Jupyter Lab - Unauthenticated Access name: Jupyter Lab - Unauthenticated Access
author: j4vaovo author: j4vaovo
severity: critical severity: critical
description: JupyterLab was able to be accessed without authentication. description: |
JupyterLab was able to be accessed without authentication.
reference: reference:
- https://paper.seebug.org/2058/ - https://paper.seebug.org/2058/
classification: classification:
@ -12,8 +13,8 @@ info:
cvss-metrics: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H cvss-metrics: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cwe-id: CWE-288 cwe-id: CWE-288
metadata: metadata:
shodan-query: http.title:"Jupyterlab" shodan-query: http.favicon.hash:450899026
tags: unauth,jupyter,jupyterlab tags: unauth,jupyter,jupyterlab,misconfig
requests: requests:
- method: GET - method: GET
@ -30,6 +31,11 @@ requests:
- '"schema":' - '"schema":'
condition: and condition: and
- type: word
part: header
words:
- "application/json"
- type: status - type: status
status: status:
- 200 - 200