Open Policy Crossdomain.xml Detected
Severity:
Medium
Summary
Invicti detected an Open Policy Crossdomain.xml file.
Impact
Open policy Crossdomain.xml file allows other SWF files to make HTTP requests to your web server and see its response. This can be used for accessing one time tokens and CSRF nonces to bypass CSRF restrictions.
Remediation
Configure your Crossdomain.xml to prevent access from everywhere to your domain.
Required Skills for Successful Exploitation
Actions To Take
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Build your resistance to threats. And save hundreds of hours each month.
