Add support for MITRE ATT&CK

This commit is contained in:
2026-02-03 18:58:42 +01:00
parent 36b3d034ff
commit 5ad469d6e7
7 changed files with 4228 additions and 2 deletions
+4 -1
View File
@@ -1,4 +1,5 @@
#import "addons/cvss.typ" as cvss
#import "addons/cvss.typ"
#import "addons/mitre.typ"
= Findings
@@ -29,6 +30,8 @@ Both applications have a login screen and cannot be used by unauthorized visitor
The version of `Uptime Kuma` is not specified, while the version of `Nginx Proxy Manager` is 2.11.2 and free of publicly known vulnerabilities (CVEs).
This is referenced in MITRE's ATT&CK framework as #mitre.reference(name: "External Remote Services").
=== Evaluation
The administration interfaces are not vulnerable and cannot be used without valid credentials. Because of this, the findings are considered purely informative.