id: jira-unauthenticated-user-picker

info:
  name: Jira Unauthenticated User Picker
  author: TechbrunchFR
  severity: info
  classification:
    cpe: cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: atlassian
    product: jira_data_center
    shodan-query: http.component:"Atlassian Jira"
  tags: atlassian,jira,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/secure/popups/UserPickerBrowser.jspa"

    matchers:
      - type: word
        words:
          - 'user-picker'
# digest: 4b0a00483046022100cf4449d36447e11c0168e2bf189738639b4e12e96f7b80015d1e5656a7d7a6e9022100a386715d7aaea2d2793b8e47457f4aa8f11b069d30763be0698d264d4853be67:922c64590222798bb761d5b6d8e72950