Skip to content

Gradle Library Version Disclosure

ID: gradle-libs

Severity: info

Author: DhiyaneshDK

Tags: file,gradle,exposure

id: gradle-libs
info:
name: Gradle Library Version Disclosure
author: DhiyaneshDK
severity: info
classification:
cpe: cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
vendor: gradle
product: gradle
github-query: filename:libs.versions.toml
tags: file,gradle,exposure
http:
- method: GET
path:
- '{{BaseURL}}/gradle/libs.versions.toml'
- '{{BaseURL}}/libs.versions.toml'
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- "[versions]"
- "[libraries]"
- "[bundles]"
condition: and
- type: status
status:
- 200
# digest: 490a004630440220074d6de16a75003402d37ea01759bf0ca90985e944b2f81a53e98bd330c7dfaf02201f5b2cede2faa2fa6676ead19891716d6d43e916eaf5227829e96c35c9f64b00:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposures/files/gradle-libs.yaml"

View on Github