nuclei-templates/cves/2020/CVE-2020-11710.yaml

29 lines
649 B
YAML

id: CVE-2020-11710
info:
name: Kong Admin Rest API Unauth
author: pikpikcu
severity: info
description: An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be accessible on interfaces other than 127.0.0.1.
reference: https://nvd.nist.gov/vuln/detail/CVE-2020-11710
tags: cve,cve2020,kong
requests:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
words:
- 'Welcome to kong'
- 'configuration'
- 'kong_env'
condition: and
part: body
- type: status
status:
- 200