Update crossdomin-xml.yaml

patch-1
Prince Chaddha 2021-08-14 14:42:16 +05:30 committed by GitHub
parent e6d9a1ec90
commit d13bc82a2e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 12 deletions

View File

@ -1,25 +1,23 @@
id: insecure-crossdomain
info:
name: Insecure cross-domain.xml file
name: Insecure cross-domain.xml file
author: Borna Nematzadeh
severity: info
reference: https://www.acunetix.com/vulnerabilities/web/insecure-crossdomain-xml-file
reference: https://www.acunetix.com/vulnerabilities/web/insecure-crossdomain-xml-file
tags: exposure
requests:
requests:
- method: GET
path:
path:
- "{{BaseURL}}/crossdomain.xml"
matchers-condition: and
matchers-condition: and
matchers:
- type: status
- type: status
status:
- 200
- type: word
part: body
words:
part: body
words:
- '<allow-access-from domain="*"/>'