Skip to content

Jira Unauthenticated Projects

ID: jira-unauthenticated-projects

Severity: info

Author: TechbrunchFR

Tags: atlassian,jira

id: jira-unauthenticated-projects
info:
name: Jira Unauthenticated Projects
author: TechbrunchFR
severity: info
metadata:
max-request: 1
shodan-query: http.component:"Atlassian Jira"
tags: atlassian,jira
http:
- method: GET
path:
- "{{BaseURL}}/rest/api/2/project?maxResults=100"
matchers:
- type: word
words:
- 'projects'
- 'startAt'
- 'maxResults'
condition: and
# digest: 4a0a004730450220480809329a49a66cd05c21b680aa09e5ae1a9ed220740bc10845b51bab182abb022100a17ed1605f12cd1b82d24b0d8b0b15b7fc4ca54abc09e6d56724f607636b2dd2:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/vulnerabilities/jira/jira-unauthenticated-projects.yaml"

View on Github