Day: May 11, 2020

Cross-Site Request Forgery Vulnerabilities OWASP

OWASP
Comments
CSRF

Cross-Site Request Forgery Vulnerabilities OWASP Cross-Site Request Forgery(CSRF) is one of the top 10 security vulnerabilities with high risk. It allows a hacker to perform an action on the vulnerable site on behalf of the victim(user). If the site does not validate the original request properly then the attack is possible.   Attacker forges the […]

Sensitive Parameters are Susceptible to Brute force Attacks OWASP

OWASP
Comments

Sensitive Parameters are Susceptible to Brute force Attacks OWASP Sensitive parameters such as username, password, server IP, etc.. will be guessed by the attacker by trying a large combination of attempts. Those parameters are susceptible to Brute Force Attack, it is a one of OWASP vulnerability with medium risk. We should avoid the attacker guessing […]

Apache Tomcat Server Information Disclosure by Verbose OWASP

Apache Tomcat, OWASP
Comments
Tomcat Information Discloser in Error Page

Apache Tomcat Server Information Disclosure by Verbose – OWASP By default, Apache Tomcat server information exposed and leads security issues. It’s one of the OWASP vulnerabilities with low risk. Apache Tomcat server information disclosed in two places such as response header and error screen in the lower version. In the higher version of the tomcat […]