Sec-Fetch-User Header Has an Invalid Value

Home/Alerts/Alert detail/

Risk:
Informational

Type:
Passive

CWE:
CWE-352

Summary: Specifies if a navigation request was initiated by a user.

Solution: Sec-Fetch-User header must have the value set to ?1.

References: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Sec-Fetch-User

Top Security News

CISA orders federal agencies to secure Microsoft 365 tenants

Recorded Future CEO applauds "undesirable" designation by Russia

BeyondTrust fixes critical vulnerability in remote access, support solutions (CVE-2024-12356)

Google Chrome uses AI to analyze pages in new scam detection feature

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

Exploit released for critical WhatsUp Gold RCE flaw, patch now

Microsoft fixes exploited zero-day (CVE-2024-49138)

Common Alerts

InformationalCSP: Header & Meta

HighAccess Control Issue - Improper Authentication

MediumJava Serialization Object

InformationalGraphQL Endpoint Supports Introspection

MediumCSP: Wildcard Directive

LowTimestamp Disclosure - Unix

InformationalSession Management Response Identified

HighExpression Language Injection

InformationalRetrieved from Cache

MediumBuffer Overflow

Latest CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Common CWEs

CWE-1254 Incorrect Comparison Logic Granularity

CWE-923 Improper Restriction of Communication Channel to Intended Endpoints

CWE-1094 Excessive Index Range Scan for a Data Resource

CWE-914 Improper Control of Dynamically-Identified Variables

CWE-1073 Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses

CWE-66 Improper Handling of File Names that Identify Virtual Resources

CWE-358 Improperly Implemented Security Check for Standard

HighCWE-257 Storing Passwords in a Recoverable Format

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Free security scan for your website

Don't show website scan report rating on the leaderboard