nuclei-templates/http/misconfiguration/sonarqube-public-projects.yaml

29 lines
586 B
YAML

id: sonarqube-public-projects
info:
name: Sonarqube with public projects
author: sickwell
severity: low
reference:
- https://next.sonarqube.com/sonarqube/web_api/api/components/suggestions?internal=true
tags: sonarqube,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/api/components/suggestions?recentlyBrowsed="
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- '"results":'
- '"items":'
- '"more":'
part: body
condition: and