Accepted negative data

firetail:accepted-negative-data

Type:

Observation

Rule Severity:

Low

The API accepted data that is not in accordance with the specification.

Remediation

Ensure that the endpoint in question only processes data that is conforming to the specification.

Example Attack Scenario

How to Identify with Example Scenario

How to Resolve with Example Scenario

How to Identify with Example Scenario

Find the text in bold to identify issues such as these in API specifications

How to Resolve with Example Scenario

Modify the text in bold to resolve issues such as these in API specifications
References:

More findings

All Findings
Response time limit exceeded
Plaintext alternative authentication
Index creation failed
Average combined payload size reduced
Missing retry header
CVE detected