Skip to content

Active scanner rules version 68

Choose a tag to compare

View all tags
@zapbot zapbot released this 24 Sep 12:22
· 3623 commits to main since this release
ascanrules-v68
2d06139
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changed

  • Maintenance changes.
  • The following scan rules now include example alert functionality for documentation generation purposes (Issue 6119):
    • Spring Actuator
    • XSLT Injection
    • XPath Injection

Fixed

  • Address false positives with Source Code Disclosure - CVE-2012-1823 scan rule, by not scanning binary responses and responses that already contain PHP source (Issue 8638).
  • Cross Site Scripting Rule false positives at medium threshold by matching the expected context (Issue 8640).
Assets 4
Loading