Open Policy Crossdomain.xml Detected
Severity: Medium
Summary #
Invicti detected an Open Policy Crossdomain.xml file.
Impact #
Open policy Crossdomain.xml file allows other SWF files to make HTTP requests to your web server and see its response. This can be used for accessing one time tokens and CSRF nonces to bypass CSRF restrictions.
Remediation #
Configure your Crossdomain.xml to prevent access from everywhere to your domain.
Classifications #
CWE-16; ISO27001-A.14.2.5; WASC-15; OWASP 2013-A5; OWASP 2017-A6
, CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C
Netsparker Security Insights #
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Related Vulnerabilities
