Cobalt Vulnerability Wiki
Cobalt Vulnerability Wiki
Categories
V2 - AuthenticationV3 - Session ManagementV4 - Access ControlV5 - Validation/SanitizationV6 - CryptographyV7 - Error LoggingV8 - Data ProtectionV9 - CommunicationsV10 - Malicious CodeV11 - Business LogicV12 - Files ResourcesV13 - APIV14 - Config CORS (Cross-Origin Resource Sharing) CORS (Cross-Origin Resource Sharing) Vulnerability Leaking Sensitive DataEmail Spoofing to Inbox due to Missing or Misconfigured DMARC on Email Domain Enabled HTTP PUT method leads to create malicious file on the server Lack of Security Headers Mail Server Misconfiguration - Missing or Misconfigured SPF and/or DKIM Mail Server Misconfiguration - No Spoofing Protection on Email Domain Misconfigured DNS - Missing Certification Authority Authorization (CAA) Record Misconfigured DNS - Zone Transfer Missing Secure or HTTPOnly Cookie Flag Missing Strict Transport Security Header (HSTS) Missing X-Frame-Options Header Out-Of-Date Component in use Server Banner Disclosure Weak Content-Security-Policy Webserver Default Page Reveals Internal Info (Nginx, IIS)
V14 - Config
CORS (Cross-Origin Resource Sharing)
POC
- Add the following HTTP Request header: Origin: https://www.evil.com
- The Access-Control-Allow-Credentials: true and Access-Control-Allow-Origin: https://www.evil.com server response headers indicate that the server will respond to any authenticated requests from any origin, even if it is trusted or not.
Impact
Low
Likelihood
Low
Ready to get started?
Join some of these great clients we're proud to have helped