Create confluence-oauth-admin.yaml

vulnerabilities/confluence/confluence-oauth-admin.yaml

@@ -0,0 +1,27 @@
+id: confluence-oauth-admin
+
+info:
+  name: OAuth Administration
+  author: DhiyaneshDK
+  severity: low
+  metadata:
+    shodan-query: http.component:"Atlassian Confluence"
+  tags: misconfig,jira,confluence,atlassian
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/plugins/servlet/oauth/view-consumer-info"
+      - "{{BaseURL}}/confluence/plugins/servlet/oauth/view-consumer-info"
+
+    stop-at-first-match: true
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - '<title>OAuth Consumer Information'
+          - 'OAuth Administration'
+
+      - type: status
+        status:
+          - 200