vortex (James McLean)

icon indicating a website link http://www.vortex.id.au

icon location Australia icon location Ex-Pentester. Ex-developer. Infosec & Offensive Security, OSCP/OSWP. Homebrewer of beer. @sectalks Adelaide co-organiser.

Results 10 comments of vortex (James McLean)

Baseline check only saves last returned IP for the last baseline resolver

Thank you for your submission! It does look like an issue as discussed, we'll investigate further and push a fix.

Failure to invalidate session on permission change

Approved to be imported into intermediate branch as `varies`.

Add Cryptographic Weakness Category

Approved to be moved into intermediate branch.

HTTP Request Smuggling

Approved for inclusion in intermediate branch as varies.

Server Security Misconfiguration > Unsafe File Upload > File Extension Filter Bypass should be higher severity

Without the demonstrated ability to _execute_ the uploaded code, the ability to perform an unrestricted upload is not directly helpful which is why it's rated at P5 by default in...

Server Security Misconfiguration > Unsafe File Upload > File Extension Filter Bypass should be higher severity

Thanks for the clarifications @foobar7 @blischalk - The OWASP guidance above references both server-side _and_ client-side; and while I've incorrectly assumed this was server-side predominantly, I still believe this is...

Deprecation of XSS on IE11

Approved to go to intermediate branch

Updating the SSRF category

Tests will all need to function and pass before this can be merged, they seem to be failing on invalid syntax in a JSON file. The original submitter of the...

Updating the SSRF category

Minor updates to be made around the P5s before approval can be provided.

PII-leakage-update

Approved for inclusion in intermediate branch.