OWASP / crAPI

completely ridiculous API (crAPI)
Apache License 2.0
1.08k stars 334 forks source link

Add Security Misconfiguration vulnerabilities in crAPI #122

Open JBAhire opened 1 year ago

JBAhire commented 1 year ago

Is your feature request related to a problem? Please describe. We should be able to demo security misconfiguration vulnerabilities with crAPI. Security misconfiguration falls under API7:2019 Security Misconfiguration.

Describe the solution you'd like There are CWEs which fall under security misconfigs:

We want to add capability in crAPI to be able to demo all three of them.

Describe alternatives if any you've considered NA

Additional context NA

nikhil-rajesh commented 1 year ago

Implemented one security misconfiguration vuln in #157