New Published Rules - cosmosofcyberspace_github_io.web_cache_deception_nodejs_express_framework

cosmosofcyberspace_github_io/web_cache_deception_nodejs_express_framework.jsx

@@ -0,0 +1,11 @@
+const express = require('express')
+const app = express()
+const port = 3000
+
+app.get('/info/nuri.yavuz*', (req, res) => {
+  res.send('Company: Trendyol, Birth Date: 1997, Country: Turkey, Phone: 5554443322')
+})
+
+app.listen(port, () => {
+  console.log(`Example app listening on port ${port}`)
+})  

cosmosofcyberspace_github_io/web_cache_deception_nodejs_express_framework.yaml

@@ -0,0 +1,37 @@
+rules:
+- id: web_cache_deception_nodejs_express_framework
+  patterns:
+  - pattern-either:
+    - pattern: $Y.get($X, ...)
+    - pattern: $Y.post($X, ...)
+    - pattern: $Y.put($X, ...)
+    - pattern: $Y.delete($X, ...)
+    - pattern: $Y.patch($X, ...)
+  - pattern-inside: |
+      require('express')
+      ...
+  - metavariable-pattern:
+      metavariable: $X
+      patterns:
+      - pattern-regex: \/[^'"]*[*]
+  message: Detected express path decorator with * character may lead to web cache
+    deception
+  severity: INFO
+  languages:
+  - js
+  - javascript
+  metadata:
+    category: security
+    subcategory:
+    - vuln
+    cwe:
+    - 'CWE 525: Use of Web Browser Cache Containing Sensitive Information'
+    confidence: MEDIUM
+    likelihood: MEDIUM
+    impact: HIGH
+    technology:
+    - express
+    - nodejs
+    source_rule_url: https://cosmosofcyberspace.github.io/semgrep/nodejs/express/express.html
+    references:
+    - https://cosmosofcyberspace.github.io/semgrep/nodejs/express/express.html