Vulnerabilities detected

firetail:vulnerability-detected

Type:

Detection

Rule Severity:

Several

A vulnerability has been detected in the underlying software and or packages of this API.

‍

‍

Remediation

Update the software and packages for this API to the latest versions and follow any instructions in the original finding.

Example Attack Scenario

How to Identify with Example Scenario

How to Resolve with Example Scenario

How to Identify with Example Scenario

Find the text in bold to identify issues such as these in API specifications

How to Resolve with Example Scenario

Modify the text in bold to resolve issues such as these in API specifications

References:

More findings

API Gateway access logging is not configured for FireTail

API key in query string

Mailgun secrets found in logs

Vulnerabilities detected

Unexpected GraphQL response

AppSync GraphQL API Authentication using API keys