id: crxde-lite

info:
  name: CRXDE Lite - Exposure
  author: nadino
  severity: low
  description: |
    CRXDE Lite exposure was detected.
  reference:
    - https://github.com/Az0x7/vulnerability-Checklist/blob/main/Aem%20misconfiguration/aem.md
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
    max-request: 1
    verified: true
  tags: aem,crxde,exposure,adobe,misconfig

http:
  - method: GET
    path:
      - "{{BaseURL}}/crx/de/index.jsp"

    matchers:
      - type: word
        words:
          - "<title>CRXDE Lite</title>"
# digest: 490a0046304402203d029717a22dd5409e84f6422c83165d524035cfad8b927a2f3e669aa404bd4d02205dcc853909c468f523008146b23654aceaccc7e18d5ab6aed60cfc58bd606da3:922c64590222798bb761d5b6d8e72950