Insecure Reflected Content
Severity: Low
Summary #
Invicti detected that the target web application reflected a piece of content starting from the first byte of the response. This might cause security issues such as Rosetta Stone Attack.
Impact #
An attacker might bypass same origin policy and use website to his or her advantage. Rosetta Flash is a known vulnerability which uses this technique making a victim perform arbitrary requests to the domain with the vulnerable endpoint and exfiltrate potentially sensitive data.
Actions To Take #
Action might vary depending on the use of this page. This is reported just for your attention. If you concern about security and this page is used to provide data via JSONP callback function,
Content-Disposition header with filename attribute can be returned to mitigate a possible attack:Content-Disposition: attachment; filename=f.txt
Classifications #
CWE-16; ISO27001-A.14.2.5; WASC-15; OWASP 2013-A5; OWASP 2017-A1
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
