Bypassing 403

Home/Alerts/Alert detail/

Risk:
Medium

Type:
Active

Summary: Bypassing 403 endpoints may be possible, the scan rule sent a payload that caused the response to be accessible (status code 200).

References

https://www.acunetix.com/blog/articles/a-fresh-look-on-reverse-proxy-related-attacks/

https://i.blackhat.com/us-18/Wed-August-8/us-18-Orange-Tsai-Breaking-Parser-Logic-Take-Your-Path-Normalization-Off-And-Pop-0days-Out-2.pdf

https://www.contextis.com/en/blog/server-technologies-reverse-proxy-bypass

Top Security News

Microsoft 365 outage impacts Exchange Online, Teams, Sharepoint

APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell Malware

Chinese Hackers Use GHOSTSPIDER Malware to Hack Telecoms Across 12+ Countries

Cloudflare says it lost 55% of logs pushed to customers for 3.5 hours

U.S. Telecom Giant T-Mobile Detects Network Intrusion Attempts from Wireline Provider

Phishing-as-a-Service "Rockstar 2FA" Targets Microsoft 365 Users with AiTM Attacks

INTERPOL Arrests 5,500 in Global Cybercrime Crackdown, Seizes Over $400 Million

Critical Flaw in ProjectSend Under Active Exploitation Against Public-Facing Servers

Common Alerts

InformationalUsername Hash Found in WebSocket message

MediumAnti-CSRF Tokens Check

HighText4shell (CVE-2022-42889)

HighExternal Redirect

MediumX-ChromeLogger-Data (XCOLD) Header Information Leak

MediumCSP: Meta Policy Invalid Directive

LowSecure Pages Include Mixed Content

LowCookie Without Secure Flag

MediumCSP: Malformed Policy (Non-ASCII)

LowStrict-Transport-Security Max-Age Malformed (Non-compliant with Spec)

Top CVE List

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CVE-2009-1151 phpMyAdmin Remote Code Execution Vulnerability

CVE-2015-2360 Microsoft Win32k Privilege Escalation Vulnerability

CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability

CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability

CVE-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability

CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability

Top CWE List

CWE-15 External Control of System or Configuration Setting

HighCWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic

CWE-1395 Dependency on Vulnerable Third-Party Component

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

CWE-1426 Improper Validation of Generative AI Output

MediumCWE-190 Integer Overflow or Wraparound

CWE-236 Improper Handling of Undefined Parameters

CWE-328 Use of Weak Hash

Free security scan for your website

Don't show website scan report rating on the leaderboard