From faae895a2e8c0040ceb9c0c9f14815b6bc25fe01 Mon Sep 17 00:00:00 2001 From: MostInterestingBotInTheWorld <98333686+MostInterestingBotInTheWorld@users.noreply.github.com> Date: Sun, 5 Feb 2023 11:34:12 -0500 Subject: [PATCH] Enhancement: exposures/configs/alibaba-canal-info-leak.yaml by mp --- exposures/configs/alibaba-canal-info-leak.yaml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/exposures/configs/alibaba-canal-info-leak.yaml b/exposures/configs/alibaba-canal-info-leak.yaml index 0d04d1e1b6..c3fa3bc48f 100644 --- a/exposures/configs/alibaba-canal-info-leak.yaml +++ b/exposures/configs/alibaba-canal-info-leak.yaml @@ -1,9 +1,14 @@ id: alibaba-canal-info-leak info: - name: Alibaba Canal Info Leak + name: Alibaba Canal Info Leak - Detect author: pikpikcu severity: info + description: Alibaba Canal login panel was detected. + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0.0 + cwe-id: CWE-200 reference: - https://github.com/alibaba/canal/issues/632 - https://netty.io/wiki/reference-counted-objects.html @@ -33,3 +38,5 @@ requests: - "ncanal.aliyun.secretKey" condition: and part: body + +# Enhanced by mp on 2023/02/05