| Details | |
|---|---|
| Alert Id | 10058 |
| Alert Type | Active |
| Status | release |
| Risk | Informational |
| CWE | 16 |
| WASC | 20 |
| Technologies Targeted | All |
| Tags |
OWASP_2017_A06 OWASP_2021_A04 WSTG-V42-CONF-06 |
Summary
A request that was originally observed as a POST was also accepted as a GET. This issue does not represent a security weakness unto itself, however, it may facilitate simplification of other attacks. For example if the original POST is subject to Cross-Site Scripting (XSS), then this finding may indicate that a simplified (GET based) XSS may also be possible.