diff --git a/exposures/configs/eea-disclosure.yaml b/exposures/configs/eea-disclosure.yaml new file mode 100644 index 0000000000..76523c5963 --- /dev/null +++ b/exposures/configs/eea-disclosure.yaml @@ -0,0 +1,25 @@ +id: eea-disclosure + +info: + name: EEA Information Disclosure + author: pikpikcu + severity: high + reference: https://www.cnvd.org.cn/flaw/show/CNVD-2021-10543 + +requests: + - method: GET + path: + - "{{BaseURL}}/authenticationserverservlet" + + matchers-condition: and + matchers: + + - type: regex + regex: + - "(.*?)" + - "(.*?)" + condition: and + + - type: status + status: + - 200