Accepted negative data

firetail:accepted-negative-data

Type:

Observation

Rule Severity:

Low

The API accepted data that is not in accordance with the specification.

Remediation

Ensure that the endpoint in question only processes data that is conforming to the specification.

Example Attack Scenario

How to Identify with Example Scenario

How to Resolve with Example Scenario

How to Identify with Example Scenario

Find the text in bold to identify issues such as these in API specifications

How to Resolve with Example Scenario

Modify the text in bold to resolve issues such as these in API specifications
References:

More findings

All Findings
Missing rate limit headers
SSL vulnerabilities detected
Undocumented content-type
GitLab secrets found in logs
Twilio secrets found in logs
Suspicious activity found in logs