icinga-dashboard-exposure: Icinga Exposed Dashboard

日期: 2026-01-16 | 影响软件: Icinga Dashboard | POC: 已公开

漏洞描述

Icinga Dashboard was exposed.

PoC代码[已公开]

id: icinga-dashboard-exposure

info:
  name: Icinga Exposed Dashboard
  author: DhiyaneshDk
  severity: medium
  description: |
    Icinga Dashboard was exposed.
  reference:
    - https://icinga.com/
  metadata:
    verified: true
    max-request: 1
    shodan-query: html:"icinga" html:"Statistics"
  tags: exposure,icinga,statistics,oos

http:
  - method: GET
    path:
      - "{{BaseURL}}/icinga2"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains_all(body, "Statistics", "Icinga")'
        condition: and
# digest: 4b0a00483046022100bb2eb8eef80e0c021f7f22578811c625f3d659f30d593552a67e1213c4bfbafd022100fd577ade9124219d3da0865c7d7971b0a9dbf4b6fa1e2ead5dc34c586cfe0a0c:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/icinga-dashboard-exposure.yaml

相关漏洞推荐