Unexpected Redirect Response Body (Too Large)
Severity: Information
Summary #
Invicti identified an unexpected redirect response body (too large).
This generally indicates that after redirect the page did not finish the response as it was supposed to.
Impact #
This can lead to serious issues such as authentication bypass in authentication required pages. In other pages it generally indicates a programming error.
Remediation #
- Finish the HTTP response after you redirect the user.
- In ASP.NET, use
Response.Redirect("redirected-page.aspx", true)instead ofResponse.Redirect("redirected-page.aspx", false). - In PHP applications, call
exit()after you redirect the user.
Classifications #
CWE-698; ISO27001-A.14.2.5; WASC-40; OWASP PC-C6
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
