appsmith-rce.yaml

id: appsmith-rce-version-check

info:
  name: Appsmith RCE Vulnerability by Version
  author: Generated
  severity: critical
  tags: appsmith, rce, version-check

requests:
  - method: GET
    path:
      - "{{BaseURL}}/settings/version"

    headers:
      User-Agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:132.0) Gecko/20100101 Firefox/132.0"
      Accept: "application/json, text/html;q=0.9"
      Accept-Language: "en-US,en;q=0.5"
      Connection: "keep-alive"


    
    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "appsmith"
      - type: regex
        part: body
        regex:
          - "v?(1\\.(0|1|2|3|4|5|6|7|8|9|10|11|12|13|14|15|16|17|18|19|20|21|22|23|24|25|26|27|28|29|30|31|32|33|34|35|36|37|38|39|40|41|42|43|44|45|46|47))"  # Match versions up to 1.47