XSS attempt found in logs

firetail:insight-xss-in-logs

Type:

Detection

Rule Severity:

Info

Indicators for attempted XSS were found in the logs of the affected API.

XSS (Cross-Site Scripting) attacks occur when an attacker uses a web application to send malicious code, usually in the form of a browser-side script, to a different end user.

Remediation

Review the logs in question and verify that any attempted attack was unsuccessful.

Example Attack Scenario

How to Identify with Example Scenario

How to Resolve with Example Scenario

How to Identify with Example Scenario

Find the text in bold to identify issues such as these in API specifications

How to Resolve with Example Scenario

Modify the text in bold to resolve issues such as these in API specifications
References:

More findings

All Findings