Enhancement: exposures/configs/alibaba-canal-info-leak.yaml by mp

patch-1
MostInterestingBotInTheWorld 2023-02-05 11:34:12 -05:00
parent 42cd2538f0
commit faae895a2e
1 changed files with 8 additions and 1 deletions

View File

@ -1,9 +1,14 @@
id: alibaba-canal-info-leak
info:
name: Alibaba Canal Info Leak
name: Alibaba Canal Info Leak - Detect
author: pikpikcu
severity: info
description: Alibaba Canal login panel was detected.
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0.0
cwe-id: CWE-200
reference:
- https://github.com/alibaba/canal/issues/632
- https://netty.io/wiki/reference-counted-objects.html
@ -33,3 +38,5 @@ requests:
- "ncanal.aliyun.secretKey"
condition: and
part: body
# Enhanced by mp on 2023/02/05