Vulnerabilities detected

firetail:vulnerability-detected

Type:

Detection

Rule Severity:

Several

A vulnerability has been detected in the underlying software and or packages of this API.

‍

‍

Remediation

Update the software and packages for this API to the latest versions and follow any instructions in the original finding.

Example Attack Scenario

How to Identify with Example Scenario

How to Resolve with Example Scenario

How to Identify with Example Scenario

Find the text in bold to identify issues such as these in API specifications

How to Resolve with Example Scenario

Modify the text in bold to resolve issues such as these in API specifications

References:

More findings

GraphQL IDE

Mutation over GET

Insecure host (OAS3)

Plaintext unknown authentication

Basic Authentication found in logs

Average combined payload size elevated