{"action":"opened","issue":{"url":"https://api.github.com/repos/jquery/jqueryui.com/issues/163","repository_url":"https://api.github.com/repos/jquery/jqueryui.com","labels_url":"https://api.github.com/repos/jquery/jqueryui.com/issues/163/labels{/name}","comments_url":"https://api.github.com/repos/jquery/jqueryui.com/issues/163/comments","events_url":"https://api.github.com/repos/jquery/jqueryui.com/issues/163/events","html_url":"https://github.com/jquery/jqueryui.com/issues/163","id":213524655,"number":163,"title":" Nginx version disclosure via forbidden Page","user":{"login":"Sajibekanti","id":8643317,"avatar_url":"https://avatars1.githubusercontent.com/u/8643317?v=3","gravatar_id":"","url":"https://api.github.com/users/Sajibekanti","html_url":"https://github.com/Sajibekanti","followers_url":"https://api.github.com/users/Sajibekanti/followers","following_url":"https://api.github.com/users/Sajibekanti/following{/other_user}","gists_url":"https://api.github.com/users/Sajibekanti/gists{/gist_id}","starred_url":"https://api.github.com/users/Sajibekanti/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Sajibekanti/subscriptions","organizations_url":"https://api.github.com/users/Sajibekanti/orgs","repos_url":"https://api.github.com/users/Sajibekanti/repos","events_url":"https://api.github.com/users/Sajibekanti/events{/privacy}","received_events_url":"https://api.github.com/users/Sajibekanti/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-03-11T11:56:40Z","updated_at":"2017-03-11T11:56:40Z","closed_at":null,"body":"Hello \r\nI am Sajibe kanti \r\nI Have Found A Bug on your Web .\r\n\r\n\r\nVulnerability : Nginx version disclosure via forbidden Page\r\n\r\n\r\n\r\nThis information might help an attacker gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of Nginx.\r\n\r\nImpact: \r\nAn attacker might use the disclosed information to harvest specific security vulnerabilities for the version identified.\r\n\r\nSteps to reproduce:\r\n\r\nGo to http://jqueryui.com/jquery-wp-content/themes/jqueryui.com/i/\r\n\r\nNow the nginx version shows in bottom.\r\n\r\n\r\nReference : https://hackerone.com/reports/194319\r\n\r\n\r\nThanks \r\nSajibe Kanti"}}
{"actor":{"display_login":"Sajibekanti"}}