Advanced Search
Search Results
395 total results found
Drupal
Remediation Steps
Follow the steps below to remediate this finding on Drupal. Drupal's Form API adds CSRF tokens automatically to all forms built with the Form API.Ensure all custom forms extend \Drupal\Core\Form\FormBase and use the standard buildForm/submitForm pattern.For cu...
Server Leaks Version Information via "Server" HTTP Response Header Field
Generic / Developer guidance
Remediation Steps
Follow the steps below to remediate this finding on Generic / Developer guidance. Add a per-session, per-form CSRF token to every state-changing HTML form and validate it server-side.Generation example (PHP):$token = bin2hex(random_bytes(32)); $_SESSION['csrf_...
SMB Signing not required
Linux (Debian/Ubuntu)
Remediation Steps
Follow the steps below to remediate this finding on Linux (Debian/Ubuntu). Update Apache to the latest available version: sudo apt update sudo apt upgrade apache2 Verify the installed version: apache2 -v Restart Apache after upgrading: s...
SQL Injection
Linux (RHEL/CentOS/AlmaLinux)
Remediation Steps
Follow the steps below to remediate this finding on Linux (RHEL/CentOS/AlmaLinux). Update Apache via the package manager: sudo yum update httpd # RHEL/CentOS 7 sudo dnf update httpd # RHEL/CentOS 8+ / AlmaLinux Verify the installed ve...
SQL Injection - MySQL
Windows
Remediation Steps
Follow the steps below to remediate this finding on Windows. Download the latest Apache binary from the Apache Lounge (https://www.apachelounge.com/download/) or the official Apache website.Stop the Apache service:net stop Apache2.4Back up your configuration f...
SSH Server CBC Mode Ciphers Enabled
Microsoft IIS webserver
Remediation Steps
Follow the steps below to remediate this finding on Microsoft IIS webserver. Configure custom error pages so that detailed error information is never sent to clients.Open IIS Manager > select your site > Error Pages.For each HTTP error code, set the response t...