Emails Found in the Viewstate

Home/Alerts/Alert detail/

Risk:
Medium

Type:
Passive

CWE:
CWE-642

Summary: The following emails were found being serialized in the viewstate field:

Solution: Verify the provided information isn't confidential.

Other info: []

Latest Security News

How CISOs Can Communicate With Their Boards Effectively

Middle East Cyberwar Rages On, With No End in Sight

AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of Case

Apache fixes remote code execution bypass in Tomcat web server

Microsoft fixes bug behind random Office 365 deactivation errors

Rockstar2FA Collapse Fuels Expansion of FlowerStorm Phishing-as-a-Service

Top 10 Cybersecurity Trends to Expect in 2025

U.S. Judge Rules Against NSO Group in WhatsApp Pegasus Spyware Case

Common Alerts

HighSQL Injection - MySQL

HighServer Side Request Forgery

MediumPotential IP Addresses Found in the Viewstate

MediumCSP: style-src unsafe-inline

InformationalSec-Fetch-Site Header is Missing

MediumReverse Tabnabbing

InformationalInformation Disclosure - Sensitive Information in HTTP Referrer Header

LowCSP: Notices

MediumProxy Disclosure

InformationalGraphQL Endpoint Supports Introspection

Latest CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Common CWEs

CWE-796 Only Filtering Special Elements Relative to a Marker

CWE-939 Improper Authorization in Handler for Custom URL Scheme

CWE-757 Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

CWE-540 Inclusion of Sensitive Information in Source Code

CWE-53 Path Equivalence: '\multiple\\internal\backslash'

CWE-69 Improper Handling of Windows ::DATA Alternate Data Stream

CWE-466 Return of Pointer Value Outside of Expected Range

CWE-342 Predictable Exact Value from Previous Values

LowCWE-479 Signal Handler Use of a Non-reentrant Function

MediumCWE-777 Regular Expression without Anchors

Free security scan for your website

Don't show website scan report rating on the leaderboard