crxde-lite: CRXDE Lite - Exposure

id: crxde-lite

info:
  name: CRXDE Lite - Exposure
  author: nadino
  severity: low
  description: |
    CRXDE Lite exposure was detected.
  reference:
    - https://github.com/Az0x7/vulnerability-Checklist/blob/main/Aem%20misconfiguration/aem.md
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
    max-request: 1
    verified: true
  tags: aem,crxde,exposure,adobe,misconfig,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/crx/de/index.jsp"

    matchers:
      - type: word
        words:
          - "<title>CRXDE Lite</title>"
# digest: 4a0a00473045022100bede246c4adc5f1ecaae120a77daa31563e4f1fb2f7fcb8c7ca3889570c8d21502201cd4dc3373ccece47a355e66a09f5f767aef51a5f4a2c2c697ecaa6eb3c6505d:922c64590222798bb761d5b6d8e72950