logo

Database

Description

It is possible to cause the server to throw errors after analyzing the endpoints with different techniques such as: sending massive requests to the endpoint, sending massive characters in the body of the application.

Impact

Obtain technical information from the server.

Recommendation

Use generic messages to indicate server errors and avoid sending technical information.

Threat

Authorized attacker from the Internet.

Expected Remediation Time

⏱️ 45 minutes.

Score

Default score using CVSS 4.0. It may change depending on the context of the src.

Base 4.0

Attack vector

N

Attack complexity

L

Attack requirements

N

Privileges required

L

User interaction

N

Confidentiality (VC)

L

Integrity (VI)

N

Availability (VA)

N

Confidentiality (SC)

N

Integrity (SI)

N

Availability (SA)

N

Threat 4.0

Exploit maturity

X

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N