Fuzzing successful

firetail:fuzzing-successful

Type:

Detection

Rule Severity:

Not Applicable

Fuzzing was successfully able to extract possibly sensitive information and/or resources from this API.

Remediation

Verify that any exposure is intentional or take steps to secure access to the information / resources.

Example Attack Scenario

How to Identify with Example Scenario

How to Resolve with Example Scenario

How to Identify with Example Scenario

Find the text in bold to identify issues such as these in API specifications

How to Resolve with Example Scenario

Modify the text in bold to resolve issues such as these in API specifications
References:

More findings

All Findings
GitLab secrets found in logs
Average combined payload size reduced
Slack secrets found in logs
Fuzzing successful
Plaintext digest authentication
Insecure auth scheme