id: jira-unauthenticated-user-picker info: name: Jira Unauthenticated User Picker author: TechbrunchFR severity: High requests: - method: GET path: - "{{BaseURL}}/secure/popups/UserPickerBrowser.jspa" matchers: - type: word words: - 'user-picker'