Loading HuntDB...

Direct IP Access to Website

Critical
L
Lichess
Submitted None
Reported by ryomenshuvro

Vulnerability Details

Technical details and impact analysis

## Summary: The website is accessible directly via its IP address (37.187.205.99), which may bypass domain-based security policies and expose potential misconfigurations. ## Steps To Reproduce: 1. Open a web browser and enter the IP address: http://37.187.205.99 2. Observe that it loads the main website instead of rejecting the request or redirecting it to the proper domain. ##Expected Result: The server should block direct IP access or redirect it to the proper domain. ##Actual Result: The website is fully accessible via its IP address. ## Impact 1. Domain-based security policies (CSP, HSTS, cookies, etc.) might not be enforced, leading to potential security bypasses. 2. Possible certificate mismatch issues if HTTPS is used, making it easier for phishing attacks. 3. Firewall/hosting misconfigurations could expose internal infrastructure.

Report Details

Additional information and metadata

State

Closed

Substate

Informative

Submitted