Nuxeo Platform Login Panel - Detect
ID: nuxeo-platform-panel
Severity: info
Author: kishore-hariram
Tags: panel,nuxeo
Description
Section titled “Description”Nuxeo Platform login panel was detected.
YAML Source
Section titled “YAML Source”id: nuxeo-platform-panel
info: name: Nuxeo Platform Login Panel - Detect author: kishore-hariram severity: info description: Nuxeo Platform login panel was detected. classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N cwe-id: CWE-200 cpe: cpe:2.3:a:nuxeo:nuxeo:*:*:*:*:*:*:*:* metadata: verified: true max-request: 1 shodan-query: title:"Nuxeo Platform" product: nuxeo vendor: nuxeo tags: panel,nuxeo
http: - method: GET path: - "{{BaseURL}}/nuxeo/login.jsp"
matchers-condition: and matchers: - type: word words: - 'Nuxeo Platform' - 'alt="Nuxeo"' condition: or
- type: status status: - 200# digest: 4a0a0047304502205e2d7b26c6c82f59c56dda58d91d50c09c98ddac409a4f4a6e37a66b186d3a9d022100c0ccbd9361f264ff9e46ac3f312c79526d629d733194b0cbd1f0ee5315cfe790:922c64590222798bb761d5b6d8e72950Guide to check the vulnerabilities
Section titled “Guide to check the vulnerabilities”This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.
$ nuclei -u "URL" -t "http/exposed-panels/nuxeo-platform-panel.yaml"