irfanasyraf

Overly Permissive Cross Origin Resource Sharing Policy

2

### Description: The Cross Origin Resource Sharing Policy refers to the domains which are allowed to use resources from the server. The allowed domains are indicated in the "Access-Control-Allow-Origin" HTTP...

Host Header Injection

4

### Description: Make a request directly to the following host via HTTP (Port 80) with an arbitrary domain in the "Host" header. e.g. curl -v -k "Host: test123.com" https://"rocketchat domain"...