cloudinary-basic-auth: Cloudinary Basic Authorization - Detect

漏洞描述

Cloudinary basic authorization token was detected.

PoC代码[已公开]

id: cloudinary-basic-auth

info:
  name: Cloudinary Basic Authorization - Detect
  author: gaurang
  severity: high
  description: Cloudinary basic authorization token was detected.
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cwe-id: CWE-200
  tags: keys,file,token,cloudinary
file:
  - extensions:
      - all

    extractors:
      - type: regex
        regex:
          - "cloudinary://[0-9]{15}:[0-9A-Za-z\\-_]+@[0-9A-Za-z\\-_]+"

# Enhanced by md on 2023/05/04
# digest: 4a0a00473045022100d3af3d7f2a0b15c10efd3650bb34ae44fc9601a9356dce6da874313401e1e68402203fa6a733ecd3ecd0d327ac7d3d2bc61bd68763a1b39ea27952c91366a5dcd019:922c64590222798bb761d5b6d8e72950

来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/./file/keys/cloudinary.yaml