Merge pull request #208 from Techbrunch/patch-5

Create jira-unauthenticated-projects.yaml
2020-07-06 22:31:11 +05:30 · 2020-07-06 22:31:11 +05:30 · bd7a526f32
parent 01ddd1deae e2373db418
commit bd7a526f32
1 changed files with 18 additions and 0 deletions
--- a/security-misconfiguration/jira-unauthenticated-projects.yaml
+++ b/security-misconfiguration/jira-unauthenticated-projects.yaml
@ -0,0 +1,18 @@
+id: jira-unauthenticated-projects
+
+info:
+  name: Jira Unauthenticated Projects
+  author: TechbrunchFR
+  severity: Info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/rest/api/2/project?maxResults=100"
+    matchers:
+      - type: word
+        words:
+          - 'projects'
+          - 'startAt'
+          - 'maxResults'
+        condition: and