5 ms·
"Vulnerable" these days means a lot of things. The question is if you can actually use the vulnerability of a system to gain access or do something meaningful w
by sublimefire 5y ago
"Vulnerable" these days means a lot of things. The question is if you can actually use the vulnerability of a system to gain access or do something meaningful with it.
I'm now looking into one of the Pentest reports. It states that "Header Disclosure" is a low risk vulnerability. If you take it to the extreme then "a lot" of websites are vulnerable. I would question how the survey was carried out and how questions were framed.
- macksd 5y agoThis was my thought. A popular open source project will get a lot of wannabes who just want their name on something and file issues from random code analyzers, etc. I've looked at CVEs that don't have a good solution and decided to release because I understood the attack vector and it didn't apply to how we used the library. That's not the same thing. That said - the problems being discussed here do happen, I just don't know how accurately the headline represents that.