Loading HuntDB...

Weblate- Banner Grabbing-Ngnix Server version

W
Weblate
Submitted None
Reported by sadhu16

Vulnerability Details

Technical details and impact analysis

Hey, I have found in the HTTP response header from docs.weblate.org, the nginx web server version is disclosed. Ideally application server responds back to users error message in customzied manner by not revealing any sensitive information about webserver or underlying components in applicatio. Please see the below attached screenshots for issue details. Url on which i found this issue-https://docs.weblate.org/en/latest/ Please also refer -http://nginx.org/en/security_advisories.html For More Info refer-https://www.owasp.org/index.php/Testing_for_Web_Application_Fingerprint Note :Revealing the specific software version of the server might allow the server machine to become more vulnerable to attacks against software that is known to contain security holes. Server implementors are encouraged to make this field a configurable option.

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted