Files
nuclei-templates/http/misconfiguration/springboot/springboot-flyway.yaml
2024-12-01 13:57:55 +00:00

42 lines
1.1 KiB
YAML

id: springboot-flyway
info:
name: Springboot Flyway API
author: ELSFA7110
severity: low
description: This endpoint to retrieve the migrations
reference:
- https://docs.spring.io/spring-boot/docs/current/actuator-api/htmlsingle/#flyway
metadata:
verified: true
max-request: 2
tags: misconfig,springboot,exposure,flyway
http:
- method: GET
path:
- "{{BaseURL}}/flyway"
- "{{BaseURL}}/actuator/flyway"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- "flywayBeans"
- type: word
part: header
words:
- "application/json"
- "application/vnd.spring-boot.actuator"
- "application/vnd.spring-boot.actuator.v1+json"
- "application/vnd.spring-boot.actuator.v2+json"
condition: or
- type: status
status:
- 200
# digest: 490a004630440220698c5b3b9d56b80ca7e254eacd72626dfee00edcd0759a0dcd1ed362d646683d02202527f997e985c216d71db39eb422787b55b638789665dc859d5bb8919b6ef71b:922c64590222798bb761d5b6d8e72950