nuclei-templates/misconfiguration/springboot/springboot-scheduledtasks.yaml

42 lines
1000 B
YAML

id: springboot-scheduledtasks
info:
name: Springboot Scheduledtasks Actuator
author: ELSFA7110
severity: info
description: This endpoint to retrieve the scheduled tasks
reference:
- https://docs.spring.io/spring-boot/docs/current/actuator-api/htmlsingle/#scheduled-tasks
metadata:
verified: true
tags: misconfig,springboot,exposure
requests:
- method: GET
path:
- "{{BaseURL}}/scheduledtasks"
- "{{BaseURL}}/actuator/scheduledtasks"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- "cron"
- "fixedDelay"
condition: and
- type: word
part: header
words:
- "application/json"
- "application/vnd.spring-boot.actuator"
- "application/vnd.spring-boot.actuator.v1+json"
- "application/vnd.spring-boot.actuator.v2+json"
condition: or
- type: status
status:
- 200