diff --git a/http/misconfiguration/springboot/springboot-info.yaml b/http/misconfiguration/springboot/springboot-info.yaml index c90055e7012..e3bbb42fcf5 100644 --- a/http/misconfiguration/springboot/springboot-info.yaml +++ b/http/misconfiguration/springboot/springboot-info.yaml @@ -2,7 +2,7 @@ id: springboot-info info: name: Spring Boot Information Panel - Detect - author: philippedelteil + author: philippedelteil,tess severity: info description: Spring Boot information panel displaying app name, version information, and other values was detected. classification: @@ -18,6 +18,8 @@ http: path: - "{{BaseURL}}/info" - "{{BaseURL}}/actuator/info" + - "{{BaseURL}}/management" + - "{{BaseURL}}/management/info" stop-at-first-match: true @@ -37,9 +39,10 @@ http: - "application/vnd.spring-boot.actuator" - "application/vnd.spring-boot.actuator.v2+json" - "application/vnd.spring-boot.actuator.v1+json" + - "application/vnd.spring-boot.actuator.v3+json" condition: or - type: status status: - 200 -# digest: 4a0a0047304502207d9ff07eddbbf44fbb99729ec5944967448c70afdb69ebf813f5bf17a9598d99022100e85e5c1e19b2329dba96618a5c4680d7e56c22d15feea643768a9f652a57946a:922c64590222798bb761d5b6d8e72950 \ No newline at end of file +# digest: 4a0a0047304502207d9ff07eddbbf44fbb99729ec5944967448c70afdb69ebf813f5bf17a9598d99022100e85e5c1e19b2329dba96618a5c4680d7e56c22d15feea643768a9f652a57946a:922c64590222798bb761d5b6d8e72950