Merge pull request #1343 from projectdiscovery/princechaddha-patch-8

Create spark-webui-unauth.yaml

vulnerabilities/other/spark-webui-unauth.yaml

@@ -0,0 +1,23 @@
+id: spark-webui-unauth.yaml
+info:
+  name: Unauthenticated Spark WebUI
+  author: princechaddha
+  severity: medium
+  reference: https://github.com/vulhub/vulhub/tree/master/spark/unacc
+  tags: spark,unauth
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/"
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "<title>Spark Master at spark://"
+          - "<strong>URL:</strong>"
+        part: body
+        condition: and