Files
nuclei-templates/http/misconfiguration/springboot/springboot-health.yaml
2024-12-01 13:57:55 +00:00

37 lines
935 B
YAML

id: springboot-health
info:
name: Spring Boot Health Actuator Panel - Detect
author: pussycat0x
severity: info
description: Spring Boot Health Actuator panel was detected.
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0
cwe-id: CWE-200
metadata:
max-request: 2
tags: springboot,exposure,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/health"
- "{{BaseURL}}/actuator/health"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"status"'
- '"diskSpace"'
- '"jms"'
condition: and
- type: status
status:
- 200
# digest: 4a0a00473045022100999e6c635ccffdc9f0c496b1dfbd8d4346276d186791ccfa0d833ce23fd406c502203890d3b33a73bcd480ffee4ebba0903d67ff8b0120deb8b0edfb6dd82c28c9b1:922c64590222798bb761d5b6d8e72950