nuclei-templates/http/misconfiguration/cx-cloud-upload-detect.yaml

25 lines
571 B
YAML

id: cx-cloud-upload-detect
info:
name: CX Cloud Unauthenticated Upload - Detect
author: dhiyaneshDk
description: CX Cloud unauthenticated upload was detected.
severity: info
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0.0
cwe-id: CWE-200
tags: fileupload
http:
- method: GET
path:
- '{{BaseURL}}/upload.jsp'
matchers:
- type: word
words:
- "<HEAD><TITLE>Display file upload form to the user</TITLE></HEAD>"
condition: and
# Enhanced by md on 2022/10/20