41 matches found
Sucuri: Usage of HTTP for exporting graph data as images
Whenever a user of waf.sucuri.net exports his reports graph data as a png, an unencrypted request is sent over to export.highcharts.com. This enables a mitm-able attacker to sniff and|or replace exported image. Also, the whole practice of offloading potentially private user data to an unrelated...
6.8AI score
SaveExploits0
20